# Title: Phishing URL Snort2 Ruleset
# Updated: Fri, 25 Nov 2022 00:03:08 +0000
# Expires: 1 day (update frequency)
# Homepage: https://gitlab.com/curben/phishing-filter
# License: https://gitlab.com/curben/phishing-filter#license
# Source: https://www.phishtank.com/ & https://openphish.com/

# Notice: https://curben.gitlab.io/phishing-filter-mirror is moved to https://curben.gitlab.io/malware-filter
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0000017011700.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200000001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"00002141415515.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200000002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0000h00003.byethost7.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"000180008000100009.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0007933738373.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"000update1.alsgroup-eg.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0010101--linkn1.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0010101.linkn1.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0010105.87416.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"002.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"002005410030210000.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0051a146-c708-47a3-83b6-cb05b4bc3556.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"009877898767809999.start.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200000013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"012365889.01233699999.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"012388personas01478.02148787.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"02-12-vejrtg09e45t-08ghuj-0erhjg-0r9ehjg-0rg.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"02-12-vert5g-0e9r-0gh9fwhjre-0gf9whe-f0jhe9f.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0298762756926726.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"02ip.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"03-12-vetguher-t9g-hjehjg-0rinhg-0hng-0ehg0-9h.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"03256045601651325546.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200000021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"03256988.0325698.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"03812.76123.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"03829gh.byethost3.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"03938344-9b40-4aca-a314-1f2aa71e12ac.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"04-12-firut5gj0-9ewru-gp9wrehj-gwh-0h9v-dve.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"04320.68410.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"04396a8d-6785-4758-8bd2-c40e487bea9f.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"05-12-gve5trg-0-wrh9gfh-e0hfb-e0hf-ehf-9hf.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"05-12-ikjoge5rt-0g9e0-9thg-0r9jng-0r9hg-0h9h.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"05vb65df.qw653bv.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0640f5b9-e1b1-45e9-a0be-6d09e05525d9.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0662906629.lbagencies.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200000033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0779jiadian.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"07dddaf4-d5e5-4b93-987e-ec8c17d6857a.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"08-12-416846bert9gh-ei5rt-0g9hwjr-0gf9he-fef.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"08-12-fe3t5r0-9g-e9rhgf-0wnfvc-0whr-0fg9henf-0hf.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"08-12-vet9g0-eth5g0-89rwhnbfg0-ehbnfh0-ef.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0812746k.silvx.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"09-12-jkgoij4r-0t659hugj-0e9trhgn0-rhjg-0rgjh.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"09-12-vert-0g9e-hrt59-fg0bwnr-9fbvn9-9e0bfe.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"09-12-vet-0gh-uer9tyhjg-9rtjfg-9rhg-9rhjgrg.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"098790485641561.my.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200000043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"09hjdg65.hgj768.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0a08c7bb-4a9c-4202-a068-49fc47f721a8.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0bs.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200000046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0d4b472d-b2ec-4227-ab23-34a4264dc3c1.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0db6433f-31c6-4f70-b10e-5b99c3a01aaa.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0jng0erjgf-e3wjr5gjnwsr-0gbhnjwe-0jrtghb-0j9werg-r9jgrg.obs.af-south-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0lx-marketpage.3260515488.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0lxinform-product.36577743325.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0olut8.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200000052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0pensea.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0pensea.com.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200000054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0pensea.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0tt-106446.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0utlook.0ffice.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0web.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1.aconteciiimient.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1.acontecimie.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1.acontecimien.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"10-12-hnoi80-uj9-0h-0p9hbg0p-8g0-g0-0-g-gbg.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1000055874895566408.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200000063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1000x.finance"; content:"Host"; http_header; classtype:attempted-recon; sid:200000064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1001231624120.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200000065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1001locacao.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200000066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1001shab4bagh.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"100200300400.gq"; content:"Host"; http_header; classtype:attempted-recon; sid:200000068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"100389427122.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200000069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"101.132.78.77"; content:"Host"; http_header; classtype:attempted-recon; sid:200000070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1019r5000f9200191ee89.rf.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200000071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"102030seminar.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1023r5740f5200111ee89.rf.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200000073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1029.x10.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200000074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"103.118.159.136"; content:"Host"; http_header; classtype:attempted-recon; sid:200000075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"103.13.206.134"; content:"Host"; http_header; classtype:attempted-recon; sid:200000076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"103.155.93.229"; content:"Host"; http_header; classtype:attempted-recon; sid:200000077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"103.231.174.50"; content:"Host"; http_header; classtype:attempted-recon; sid:200000078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"103.50.160.203"; content:"Host"; http_header; classtype:attempted-recon; sid:200000079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"104.129.205.92.host.secureserver.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"104.131.50.38"; content:"Host"; http_header; classtype:attempted-recon; sid:200000081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"104.168.173.244"; content:"Host"; http_header; classtype:attempted-recon; sid:200000082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"104.168.173.248"; content:"Host"; http_header; classtype:attempted-recon; sid:200000083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"106.14.20.105"; content:"Host"; http_header; classtype:attempted-recon; sid:200000084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"106413184120.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200000085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"107.152.110.21"; content:"Host"; http_header; classtype:attempted-recon; sid:200000086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"108864198594377.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200000087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"109413584120.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200000088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"10e20o30u37.260mb.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"10messages.pending.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"11-11-88-ve65891981-45trehgt5i9-j-rugrg5gr.obs.ap-southeast-2.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"11111111111111111111111.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1111365585547384.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1123409.bancoafirma.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"11307dfb122022pak3s10.rf.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200000095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"11o9-565635953565356.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200000096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"11o9-565635953565356.gq"; content:"Host"; http_header; classtype:attempted-recon; sid:200000097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"11o9-565635953565356.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200000098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"120901805221826-am.web.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200000099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"121095116804113.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200000100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1253269874859655.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200000101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"129.226.210.78"; content:"Host"; http_header; classtype:attempted-recon; sid:200000102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"12bf0925-2782-446a-aed0-8f8c31171d7c.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"12gestaobradanet.rds.land"; content:"Host"; http_header; classtype:attempted-recon; sid:200000104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"13-11-99633359-vcwe-09u-0hre49-gfv9hbw9-4f.obs.la-south-2.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"134.122.22.221"; content:"Host"; http_header; classtype:attempted-recon; sid:200000106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"138020886578123.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200000107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"14-11-589621-85b5rtghew-rgj90-0w9herg-v09wh9grgt.obs.sa-brazil-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"14-11-fve3g5uw-0rhg80-wehf0g-wehf0-hf0-hef.obs.ap-southeast-3.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"142.11.214.173"; content:"Host"; http_header; classtype:attempted-recon; sid:200000110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"142.4.205.95"; content:"Host"; http_header; classtype:attempted-recon; sid:200000111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"14230090-a7000.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"143li.trk.elasticemail.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1449c80c-8fb3-45a0-958a-5f16c208bba5.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"147.182.137.233"; content:"Host"; http_header; classtype:attempted-recon; sid:200000115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"14gqb.trk.elasticemail.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"14jlr.trk.elasticemail.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"15-12-ge3hr509g-wrhu-g9hwer-0f9ejh-90fhhffe3.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"150.214.188.35"; content:"Host"; http_header; classtype:attempted-recon; sid:200000119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"150e43636f8e68c798c58644522ab0e3.loophole.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200000120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"153in.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"155.94.156.72"; content:"Host"; http_header; classtype:attempted-recon; sid:200000122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1605694464830.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200000123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"162.144.125.199"; content:"Host"; http_header; classtype:attempted-recon; sid:200000124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"162.222.215.185"; content:"Host"; http_header; classtype:attempted-recon; sid:200000125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"163-1ew.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"164781331554600025456.epizy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"165.227.194.222"; content:"Host"; http_header; classtype:attempted-recon; sid:200000128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"167.114.176.131"; content:"Host"; http_header; classtype:attempted-recon; sid:200000129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"167.71.45.12"; content:"Host"; http_header; classtype:attempted-recon; sid:200000130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"168623079093421.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200000131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"168b8.trk.elasticemail.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"17-11-56846f354fgp-w09jr4-gfjwn-0jvfh-w09rjh0g-er.obs.la-south-2.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"172.74.148.132.host.secureserver.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"172cd3e1-41b6-4cc6-8553-d523d4a6a63c.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"174page3eprotectionsservic3s3curity.rf.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200000136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"178.128.62.233.dsl.dyn.forthnet.gr"; content:"Host"; http_header; classtype:attempted-recon; sid:200000137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"179.43.141.107"; content:"Host"; http_header; classtype:attempted-recon; sid:200000138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"18-191-40-166.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"180110116028.clickfunnels.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1822direkt-informationen.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200000141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1822direkt-online.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200000142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1822direkt-sicherheit.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200000143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1878035b-e7a5-4ab4-924a-e413dcc10b69.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"189.38.106.100"; content:"Host"; http_header; classtype:attempted-recon; sid:200000145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"190854.8b.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"191.235.94.234"; content:"Host"; http_header; classtype:attempted-recon; sid:200000147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"19222226213215733.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200000148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"193.188.22.226"; content:"Host"; http_header; classtype:attempted-recon; sid:200000149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"198.148.100.124"; content:"Host"; http_header; classtype:attempted-recon; sid:200000150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1account-update.paiza-user-basic.cloud"; content:"Host"; http_header; classtype:attempted-recon; sid:200000151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1c736805-a8df-4bc8-9751-f6093569c6d9.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1e2e3f.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1eaca456-7994-43ed-ab73-a8d1d63751be.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1f1e6d49-c084-40e2-98a9-4e3fccd705fd.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1fg5gt.bendecid2023.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1ihch.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1inch-io-stage-app-euc1.s3-website.eu-central-1.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1inch-lab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1inch-lab.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1inch-v2.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1inch.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200000162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1inchfi.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200000163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1inchnetworkmirror.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1inchnetworkswap.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1incn.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200000166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1insh.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1lhch.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200000168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1lnch-net.preview-domain.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1lnch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200000170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1lncn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1lncn.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200000172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1lncn.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1monxt.csb.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1nfo-curr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1ntern3tprvncia.x10.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200000176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1ww-uniswap.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2-collab-land.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200000178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2-collab-land.pro.1-collab-land.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200000179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2.acontecimie.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2.acontecimien.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"20-172-200-239.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"20-199-125-53.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"20.0.22.215"; content:"Host"; http_header; classtype:attempted-recon; sid:200000184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"20.100.187.122"; content:"Host"; http_header; classtype:attempted-recon; sid:200000185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"20.150.217.241"; content:"Host"; http_header; classtype:attempted-recon; sid:200000186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"20.167.56.29"; content:"Host"; http_header; classtype:attempted-recon; sid:200000187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"20.195.162.169"; content:"Host"; http_header; classtype:attempted-recon; sid:200000188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"20.203.25.76"; content:"Host"; http_header; classtype:attempted-recon; sid:200000189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"20.211.232.179"; content:"Host"; http_header; classtype:attempted-recon; sid:200000190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"20.222.195.184"; content:"Host"; http_header; classtype:attempted-recon; sid:200000191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"20.225.72.108"; content:"Host"; http_header; classtype:attempted-recon; sid:200000192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"20.226.41.31"; content:"Host"; http_header; classtype:attempted-recon; sid:200000193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"20.226.52.222"; content:"Host"; http_header; classtype:attempted-recon; sid:200000194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"20.23.229.151"; content:"Host"; http_header; classtype:attempted-recon; sid:200000195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"20.247.88.149"; content:"Host"; http_header; classtype:attempted-recon; sid:200000196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"20.253.72.9"; content:"Host"; http_header; classtype:attempted-recon; sid:200000197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"20.84.112.206"; content:"Host"; http_header; classtype:attempted-recon; sid:200000198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"20.84.113.91"; content:"Host"; http_header; classtype:attempted-recon; sid:200000199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"20.89.89.54"; content:"Host"; http_header; classtype:attempted-recon; sid:200000200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"20101305090886952021.42web.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2020mep.com.aquaticperformancesolutions.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2020mep.com.maiais.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200000203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"20228787help54664support78.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2022portaldeactivacion.efiric.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"202ce83a-e065-494b-b222-47ce729696ed.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"204.44.82.9"; content:"Host"; http_header; classtype:attempted-recon; sid:200000207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"20503022222044.42web.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"206.81.15.214"; content:"Host"; http_header; classtype:attempted-recon; sid:200000209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"208.82.115.230"; content:"Host"; http_header; classtype:attempted-recon; sid:200000210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"20email6667webmailfurh2520-688scopeni2660.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"21.ip-139-99-91.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"211673528851174.gq"; content:"Host"; http_header; classtype:attempted-recon; sid:200000213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"21566t70.alejxa.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"217651.8b.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"21989-4492.s1.webspace.re"; content:"Host"; http_header; classtype:attempted-recon; sid:200000216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"22033-4466.s1.webspace.re"; content:"Host"; http_header; classtype:attempted-recon; sid:200000217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"22051-4479.s3.webspace.re"; content:"Host"; http_header; classtype:attempted-recon; sid:200000218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"22100993-020993-029983893.10093.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2213ad7c-9b55-45cd-a3e3-33e8c112d514.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"23427655.897651.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"234567876543345.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"23b.rhjac.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"23pqs-2qaaa-aaaad-qeh4q-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"24-11-bvgu80yh8-0pgt0p8ugb-hgu78g9o70gh0-ghu.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"245389.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"246f52a1-fcf8-4227-8c89-1795832c0cee.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2480803f-67fe-4a47-8afc-a6be50161fb3.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"24moodvibes.com.ng"; content:"Host"; http_header; classtype:attempted-recon; sid:200000229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"24xchanger.cash"; content:"Host"; http_header; classtype:attempted-recon; sid:200000230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"25a9ff8c.sibforms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"25zk6-gaaaa-aaaad-qemna-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"26-11-uhopi-0p8ihbg0p8gu77gp0-0pu70p-gg7.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"264532223743082.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200000234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2711d56e-58e4-4e82-a4d7-9dda0de26be5.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"28-11-gbet-0gh-e90rhjg-df9hn-09ehf-enf-e9fh-9hh9.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2857938.kroyx.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"288.rolandobonillarealestate.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"29-09-vewrbverbverfvb-fdvwergbergw-rgvfhwer-0ghv0-dfv.obs.na-mexico-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"293722e3-bb19-46d0-b26d-d81ca2727763.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2ac08924.sibforms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2akmx-aiaaa-aaaad-qeh6a-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2apporanges.s3.ap-southeast-1.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2b5f2bbb-fb42-4d30-abd3-1a631de7c8ff.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2bbf510e119760654.temporary.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2cdc0387-f453-4585-abc6-b131de9f7b91.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2dr.eu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2e903615-4335-4d9f-b1e9-0c4c2fffcd91.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2f4c2c68-9436-4d3f-87a2-741a12185eaf.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2f7edbe3-ae56-482c-8419-405461749355.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2fa.bthei.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2fauto-discover-usi-ch-2fowa-reason.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2g4w3-4yaaa-aaaad-qempq-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2oib7-3yaaa-aaaad-qeh7a-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2ssystemline.sa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2wheelsgonewild.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2wyslijpaczkeip389184.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2yyjq-ciaaa-aaaad-qeabq-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3-139-59-39.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3-collab-land.pro.1-collab-land.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200000260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3.acontecimie.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3.acontecimien.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"30-11-55852-f354rgift80whjfg-0wherf0-he0f8efef.obs.ap-southeast-3.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"30-11-vjwerg9-80eu5rht-0ghjwr-0gfhwe-0r98gf.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"30-11-yuio87u9-079ikoyu09o879-78ikyuo979-7.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3068175k.zuyx.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"30c5c6fe-e550-4d9a-8a88-99cc9a5fda9c.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"30e62774.smilemobile.pt"; content:"Host"; http_header; classtype:attempted-recon; sid:200000268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"30fe610f-3a29-4fae-87f1-e1bf75f27ce4.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3233-105986hhh.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3243gr9r3h2.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3284569284564837.74778555.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"32joy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"34.198.120.58"; content:"Host"; http_header; classtype:attempted-recon; sid:200000274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"343i.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3450-9gjk-wkef-093whrj5-gf9ew-vfgmw-9rjng-jef.obs.ap-southeast-2.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"34543223.tehu643.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"345656767.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"34839783344hg5566.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"34g0f9k-wedjfvmc-3we9rjnf-wdnebv-wn-ej9w0-dw.obs.na-mexico-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"35.192.38.184"; content:"Host"; http_header; classtype:attempted-recon; sid:200000281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"35262.389904.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"354rgj-rwjvgf-ehtr-gfwd-vc9hbnw-erfhn-qw9jd-wdwd.obs.sa-brazil-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"360moulds.co.za"; content:"Host"; http_header; classtype:attempted-recon; sid:200000284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"365cashonline.store"; content:"Host"; http_header; classtype:attempted-recon; sid:200000285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3664a58c-def7-424e-99fe-06128733654d.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"36746login.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"36763login.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"36987fac-be2a-4b89-8f8c-2ccbe7419264.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"36f64d79-ce53-43d6-aba8-ed7d6220ff5b.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"370.pef.2575.conscientiouscapitalinsights.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"374cc9a4-f337-4273-9636-92a6e999bbd8.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3782uj21.8372882929.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"38059dca-7654-4193-b151-7bb5381c8859.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"38493idsbaportal-yahooindex89347-iosw.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"384a09c4aaba5de287d1dd83580b4eaa-dot-office-352115.uk.r.appspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"388e03bd-b022-4448-8099-79af0fda2f69.mailbutler.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3a10a178.s6t6sj4s46tu4sys54y5.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3ada222a-af2b-440b-8817-e8be5d2da157.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3af5aecd-a4a9-4489-91e1-c221f2c40b76.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3c7db43e-a280-41f9-8469-621300b1364c.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3daysofnormal.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3dinvisiblefriend.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3dprint-voba-2fa-secwall-watchdog.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3eb12eab-3e3b-4a3f-8642-75fc6053b5b4.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3ff7c459-86b2-4f6d-b6b0-ba6402ef6cb0.htmlcomponentservice.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3j124.csb.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3pgeneralcontractor.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3rasi-yaaaa-aaaad-qeh3q-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3red.ikotri.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3uml42q7h5iwui7w6za2po5gwxuhzah3i7ywuunmnlle6cye-ipfs-w3s-link.translate.goog"; content:"Host"; http_header; classtype:attempted-recon; sid:200000311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"4-collab-land.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200000312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"4-collab-land.pro.1-collab-land.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200000313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"4.217.174.70"; content:"Host"; http_header; classtype:attempted-recon; sid:200000314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"40.115.92.247"; content:"Host"; http_header; classtype:attempted-recon; sid:200000315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"40915623-29f7-4b53-8acb-f43be777d176.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"413b0c26-dc41-46cb-9c0e-4ee60866f3a1.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"41ff87e8-fd8b-4fdd-9f12-f31b26988b93.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"428860a8-2423-4774-90c1-21302b0e72a8.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"42su3-oqaaa-aaaad-qeaxa-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"43215.345121.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"4354.31r413.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"43735467login.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"43gbr-vfck3we-5rtjgk-wrkjgv-kwe-tbjgh-werjkv-f09-fd.obs.af-south-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"43gf948h3s.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"43qf5-qqaaa-aaaad-qdaca-cai.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"43r3121.s3.us-west-004.backblazeb2.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"44-202-71-194.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"44.202.90.84"; content:"Host"; http_header; classtype:attempted-recon; sid:200000329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"44b278d1-5850-4a5c-a193-290c7f377af3.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"44ff4c43-3a41-44c9-a200-9cd88c280e10.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"44h6yhwj4gcl4aw-66r0nmlje2nje2odczotcuq.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"44hbtr.atgbq6.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"44jwg75s7uqb44rauxk7ylzmzla-164968718361.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"44mlje2nje2odczotcuq2p3s0nbandws3lzqmh-cn0vpd0f.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"45-66-151-68.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"45.55.167.181"; content:"Host"; http_header; classtype:attempted-recon; sid:200000337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"453289422.pichiweb170820.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"45893652-80-20200609091754.webstarterz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"45hkcueq8nmdegqiara6biw1440bih-7356dpr45.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"47.89.49.243"; content:"Host"; http_header; classtype:attempted-recon; sid:200000341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"47.92.194.40"; content:"Host"; http_header; classtype:attempted-recon; sid:200000342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"4710463d43910.bonactech.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"48519283-86de-4ef6-9db2-7be27af47c73.htmlcomponentservice.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"49c4422f-20de-4f16-ba8e-ed5820229096.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"4a52ugegxwdk52h223kho3crud3mm2iizq33m6oska-ipfs-nftstorage-link.translate.goog"; content:"Host"; http_header; classtype:attempted-recon; sid:200000346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"4bx28w.csb.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"4c96b.kastamonukres.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"4ccounpag3ssecuree3citan.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"4cv9mn.1wa0ny.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"4e1f4398-a770-4cb9-9f0a-919a8aeda063.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"4e5e894d-0115-4158-83a3-56c8301d075c.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"4ee08920-f6e9-411f-803f-a9e151513078.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"4ef4e5bb-6f2c-4b11-a52f-db93134edf1b.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"4f745f8b-644a-42b2-9daf-24e9a0b0e002.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"4pforange.byethost14.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"4season.com.kh"; content:"Host"; http_header; classtype:attempted-recon; sid:200000357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"4w8bmmjcw86e.clickfunnels.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"5.188.51.45"; content:"Host"; http_header; classtype:attempted-recon; sid:200000359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"51.161.57.84"; content:"Host"; http_header; classtype:attempted-recon; sid:200000360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"51.222.218.236"; content:"Host"; http_header; classtype:attempted-recon; sid:200000361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"51.fi"; content:"Host"; http_header; classtype:attempted-recon; sid:200000362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"516541--412589.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"518c55aa-2323-4789-add3-9ad265f0d64e.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"52.136.121.109"; content:"Host"; http_header; classtype:attempted-recon; sid:200000365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"52.20.22.249"; content:"Host"; http_header; classtype:attempted-recon; sid:200000366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"52.229.224.250"; content:"Host"; http_header; classtype:attempted-recon; sid:200000367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"5243y-m.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"5244d902-2ffa-4700-bafe-1673e2ce0f1d.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"5263782339.gal1c1a.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"52wanyue.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"53ef7abd-cc99-4130-babe-fbff2590987c.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"53vzxcnk6rwp.clickfunnels.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"54.157.4.63"; content:"Host"; http_header; classtype:attempted-recon; sid:200000374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"54.167.86.69"; content:"Host"; http_header; classtype:attempted-recon; sid:200000375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"54.187.230.57"; content:"Host"; http_header; classtype:attempted-recon; sid:200000376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"543222.645322.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"54436.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"546782d6.sibforms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"54b3533a-9458-417d-b208-2a60ac5dc662.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"5578805078050785078i.rf.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200000381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"55b8a810-bd69-4b49-910c-ffaf82d9fdfc.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"56544.56554.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"5667566098886665477.42web.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"57687login.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"5apps.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"5b0f6cb9-0485-4fc7-9775-eb74bb45bbf6.htmlcomponentservice.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"5cba0057-6142-44ac-ba61-a601a3869568.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"5ec48f0d-8d27-4e20-ba0c-5a15a54dc41f.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"5qgn.short.gy"; content:"Host"; http_header; classtype:attempted-recon; sid:200000390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"600500100025463555.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"6028417k.franjx.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"60f322a2-2f95-42de-8b72-32d72d878b64.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"61da8ae6.6u6566hrrthsh45.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"62dfdb2409029ab686ceaaf12cf05a10.mail-raiffeisen-hu.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"63.247.135.151"; content:"Host"; http_header; classtype:attempted-recon; sid:200000396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"6351c258-b3fd-4b6d-a956-624ec838fa3c.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"6364e966c42e4e7e43030d44--resonant-naiad-11e369.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"63892874.mijex.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"638ca12d-ba2f-451c-8418-faf56b7de7ff.htmlcomponentservice.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"64144214-1195-47c8-b381-5dec33e94edf.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"6424login.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"64469ce8-6954-4771-aa14-d0d19add8edf.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"6455441564164.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"6486570459-ytj35-g9fh3er-f9j3e-95thg-rjg-9rjggrg.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"6543.64532.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"654fdaf6-40dc-43e6-a3e7-afbb40e6fe60.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"658157hb.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"65try64057d-3747html169992397uu13043ggffrofficia990.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"661961441412.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"664441446144.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"6645454411123.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"66456465454514.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"66464141021.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"6646465416414.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"66642.66643.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"67-108126.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"673202599394260.wiki"; content:"Host"; http_header; classtype:attempted-recon; sid:200000418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"673925.selcdn.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"67889562325a.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"68.183.201.58"; content:"Host"; http_header; classtype:attempted-recon; sid:200000421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"69bc22c3-acfc-4b74-9658-9f8ea74010be.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"6a1064bd-c960-476f-b9b3-5ccf98215bf4.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"6bd0e8c9-ac92-4815-8869-8b76b1a64352.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"6bffc059-4149-4375-975f-31ba6a805a1a.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"6dc45.k8ds4.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"6ff6e4d8-f219-4e43-9db2-73427bad5c9f.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"6kvme.csb.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"6po4.q3rzc.villa-esplanada.ro."; content:"Host"; http_header; classtype:attempted-recon; sid:200000429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"6sil6-4qaaa-aaaad-qea3a-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"7-10-frvbetbghetfb-erdtgnbrfyhnedtrfb-deftrbdefbfb.obs.la-south-2.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"709f47ac-ffc4-46e2-915b-b40c819d2038.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"71503f00-fe6f-48da-8992-9a607d2e3ea2.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"71bb5133-292f-4a29-aa66-71d39b0b94fc.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"72352723-54363.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200000435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"72hm6-xqaaa-aaaad-qemqa-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"7317c5e9-d198-4c59-9a53-75669ba4d8a8.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"735676e8-8435-46fe-92c9-1fc67c11cecc.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"73sl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"74.119.150.125"; content:"Host"; http_header; classtype:attempted-recon; sid:200000440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"745f5bbd-3686-4e63-9c8e-eda939dd3443.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"746346555555god.lsandrea21.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"74674login.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"746758.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"74b180a9-f190-40b8-a8ca-791994a03126.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"765456login.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"7676678.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"779425.selcdn.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"78.108.89.240"; content:"Host"; http_header; classtype:attempted-recon; sid:200000449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"780030.selcdn.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"7887390.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"7887ef3d-0c8e-4af1-bfcd-bb89b9c48f3c.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"79329922-8c54-41b2-a7ae-9ab78edc1475.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"79520.654333.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"7b08c.curiaclube.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"7b631qxp.r.us-west-2.awstrack.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200000456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"7ce87ec1-06bd-425b-ae40-06a604651069.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"7cf3fd69.sibforms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"7dbe4fff.sibforms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"7e9eaec1-6980-403b-ad59-4cc3d682d639.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"7evenconnect.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"7moyen.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"7x24hospital.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"7x5dvh.csb.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"7yu3v.csb.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"80058230-8945-4c9a-939c-9d4d02daa16f.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"8020cl.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200000467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"814106.selcdn.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"815501.selcdn.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"81d73dc6-2dbd-46e2-9df3-b08a4dfc3268.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"821314.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"82jhx56627.229teach72.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"82v8b.app.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"83.212.106.222"; content:"Host"; http_header; classtype:attempted-recon; sid:200000474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"835d5173-b841-47dd-b4b7-6dd9c8130de8.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"84100.02350.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"84301696-5b78-4359-8f92-ddf591dc8611.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"85-209-134-238.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"854.optima.com.py"; content:"Host"; http_header; classtype:attempted-recon; sid:200000479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"85400.00500.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"8545882a-7683-425f-8827-fe46921affb8.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"8633e3ac-0824-424e-b18e-35658640a3eb.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"8672940k.gmayax.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"86735434.3524524.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"8675345eminent--98675323ths.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"8675345eminent.98675323ths.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"870008720010087.rf.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200000487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"873734349834.start.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200000488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"873twc.csb.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"874561356215640561321.web.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200000490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"876534453--gal1c1a.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"876534453.gal1c1a.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"87653645login.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"8787878787878.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"8792ce67-fa21-49db-9498-88655d74276b.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"879686873253624.87685657.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"87e3f50b-2042-4090-a3a4-b0ed4cea9ca2.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"8826898l.2987637887.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"8917403f-4b7c-49e4-bd9b-681e3c16986b.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"893j2n22.145277281q.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"89888756.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200000501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"8d7af84c.sibforms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"8liens.start-premint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"8thwonderbakehouse.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"8vs.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"9082745k.yomx.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"91.193.18.142"; content:"Host"; http_header; classtype:attempted-recon; sid:200000507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"91wyou.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"92.204.144.8"; content:"Host"; http_header; classtype:attempted-recon; sid:200000509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"9274486k.victx.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"927g2g772--339393828k.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"927g2g772.339393828k.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"92912.98012.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"933025ce-435a-40ea-aa0b-b9be8b5242ba.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"934-104141ya.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"93467352857444.483574.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"9382758k.grimxl.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"943ec1e5-50d0-4ded-b027-cbcd6f2cd87d.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"956200.95610.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"9641646444654.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"964e5cd4-6c8f-4040-8807-0b0749923295.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"965462165652.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200000522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"96e00e40-f767-4992-aaff-08f8d5786ed9.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"971c933f-931c-4164-8d7a-c00c34a3f13e.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"980-9-hj-hg-08g-089ibhg0-8g0-pf8v0-g-0g8vb80-j.obs.sa-brazil-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"9818i367.gilxr.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"984d6644-c280-4353-8a21-95d85d624208.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"987623.123478.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"98895138220.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200000529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"988e56a4-cf63-4106-8eba-f2a750c4e836.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"992-92586948999.us-south.cf.appdomain.cloud"; content:"Host"; http_header; classtype:attempted-recon; sid:200000531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"99231.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200000532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"9966a.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"999b01c3-3827-4993-9b65-0195dd9f1365.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"9a8a7b61-85b3-478d-b670-c54b73be21b4.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"9aa80306.kottedj.uz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"9c14b4e7-618c-4c6e-a75e-e18b134692a9.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"9d0f67635b4f02031d2b9743f9c1ef8e.email1-identita-csob-cz.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"9d62cfee-59b3-42a8-9542-4b3a32692792.htmlcomponentservice.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"9dcc.alert-freemint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"9dcc.for-minting.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"9dyw5.r.ag.d.sendibm3.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"9et-5t4rted-565865.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200000543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"9et-5t4rted-565865.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200000544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"9et-5t4rted-565865.gq"; content:"Host"; http_header; classtype:attempted-recon; sid:200000545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"9et-5t4rted-565865.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200000546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"9et-5t4rted-565865.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200000547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"9f798fa3-b881-46a3-92e3-e9fed4078c55.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"9fb116a9-6c1f-4e6d-9613-c65562e71d73.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"9ftytucsh4ph.clickfunnels.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"9janewshub.com.ng"; content:"Host"; http_header; classtype:attempted-recon; sid:200000551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a-108748.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a-fmezv1.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200000553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a.60b7ac265566e3da4341f765b2d2a73200f8f1db57b0b005a1afdc00.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a.dab342ab8887461995aad393cb294948a5ce800ca279cd1027026d47.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a.dwnl.my.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200000556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a.eddyx.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a.gibsonwine.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a.insecurpage.recovery-safty.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a.opento.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a0570626.xsph.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a0739963.xsph.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a0743497.xsph.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a0w0kt.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a0zxa3.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a11egrolokalnie.2206215111.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a179e6f9-6f95-438a-9fd1-892273fe0e7d.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a2ddc3ee-c158-4dd6-8305-bc08fa880fd9.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a2uvjo.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a4d3b42c.chgmar-d8y.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a5b94334-7664-4808-9609-96fbfa0976e2.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a6709c2d-180e-4e29-ac26-3161242f2455.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a6f7a144-06b9-44fd-8ba6-3d311ce227e1.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a71843c1.mailssocloud-srvr65e5rd.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a7dd4991-6cc2-4a3f-9dfa-2744251f7613.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a801fec7-1506-45f0-84c4-433776c6fce3.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a88d57af81b9.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a8f3c1e3-5b2f-478d-bf36-a27d4aa9b65d.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a917a9cd-90b3-44ee-9c2a-37a213430b1f.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a9c734.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aa.mfs.gg"; content:"Host"; http_header; classtype:attempted-recon; sid:200000581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aa4df196-dc66-4e21-b6a8-540dba6e1b29.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aa52ea7e73864.bonactech.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aaaa-9qg.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aabbccee-86c0a.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aabbccee-86c0a.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aabwszchqe.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aadyacorpdigital.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aaewr-8658f.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aaewr-8658f.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aair.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aajkabahujanmedia.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aapks.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aarr.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aasapiubpo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aave-claims.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aave-ethereum.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200000597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aave-ethereum.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200000598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aave-usdt.life"; content:"Host"; http_header; classtype:attempted-recon; sid:200000599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aave.arnadoor.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aave.im"; content:"Host"; http_header; classtype:attempted-recon; sid:200000601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aave.yt"; content:"Host"; http_header; classtype:attempted-recon; sid:200000602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aavebin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aavedrop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aaveexs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aaveka.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200000606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aavelend.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aaveorg.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aavepool.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aaveqmo.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200000610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aavev3concept.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aavev3top.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aavomrksmr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aavuppqpsk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aayushk12.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ab-hraq1.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200000616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ab-it.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ab85dd93-7deb-4730-82d0-cd910d6e6ba9.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aba.melonwoodhomes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"abastecedora-agg.com.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200000620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"abbagfxv2.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200000621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"abbwvvzmlt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"abfaevlptk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"abigcaptchabnn7.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200000624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"abigcaptchabyte6.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200000625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"abigcaptchaite4.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200000626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"abigcaptchaloi5.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200000627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"abka3d.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"abkqkroe3994nkelwp9020jsmw2093jdmmw.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"abolaria-bolos-caseiros.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"abonnement-impayer.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200000631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"abracadabra-walet.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"absa-24.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200000633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"absakenya.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"absolutepleasure.com.my"; content:"Host"; http_header; classtype:attempted-recon; sid:200000635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"absorbed-wonderful-laundry.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200000636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"abuelacassandra.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"abundant-cook.surge.sh"; content:"Host"; http_header; classtype:attempted-recon; sid:200000638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"abzxwmdrwg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ac2es1.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"academia-rennersolucoes-portl.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"academy.opencloud.cloud"; content:"Host"; http_header; classtype:attempted-recon; sid:200000642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.aajgpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.ahgcef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.axnsac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.bqdttb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.eakwzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.gpypor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.hijfcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.hsjtfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.ifqxct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.jpvnhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.jyshzc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.kqhhdq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.ksmfpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.kvufus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.mhuakn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.nwnwpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.ofgnzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.qifvbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.qxykiz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.sigxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.skahgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.vlfhkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.wcxbpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.wkjagf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.xfcbpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.xqimja.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.yjmokp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeeaaen.aseaesasen.zzqnrn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.bfuamk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.bqdttb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.ccfxga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.dhvppl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.eakwzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.euiddi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.fghgux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.gnhqcy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.gtwkyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.hijfcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.hsjtfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.ifqxct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.ilgeku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.jhmkue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.jrgxnf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.kyvggq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.mhuakn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.nbzxlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.nhmobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.rdotfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.rhokdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.rjzjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.uanwtt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.uyylmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.vodlvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.wkjema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.xelvgn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.xqimja.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeenen.aseaasen.xwipxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaeesaaeen.aaseaensaasen.qvsaen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosaaen.aseaesosen.bqdttb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosaaen.aseaesosen.cabycv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosaaen.aseaesosen.dwxgub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosaaen.aseaesosen.ecwqvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosaaen.aseaesosen.gnhqcy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosaaen.aseaesosen.gpypor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosaaen.aseaesosen.hijfcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosaaen.aseaesosen.ilgeku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosaaen.aseaesosen.jrgxnf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosaaen.aseaesosen.jtrejs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosaaen.aseaesosen.jyshzc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosaaen.aseaesosen.kqhhdq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosaaen.aseaesosen.kwueve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosaaen.aseaesosen.lnntsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosaaen.aseaesosen.mpxuis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosaaen.aseaesosen.nwnwpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosaaen.aseaesosen.qifvbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosaaen.aseaesosen.rdotfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosaaen.aseaesosen.vlfhkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosaaen.aseaesosen.wkjagf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosaaen.aseaesosen.xosxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosaaen.aseaesosen.yxdwbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosaaen.aseaesosen.zcjwnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosaaen.aseaesosen.ziaxaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosnen.aseaosen.ahtzjy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosnen.aseaosen.aofwip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosnen.aseaosen.axnsac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosnen.aseaosen.euiddi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosnen.aseaosen.fghgux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosnen.aseaosen.ftjaie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosnen.aseaosen.fxdrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosnen.aseaosen.gnhqcy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosnen.aseaosen.hkvydr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosnen.aseaosen.ilgeku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosnen.aseaosen.jsyioj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosnen.aseaosen.jutyeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosnen.aseaosen.jyshzc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosnen.aseaosen.kqhhdq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosnen.aseaosen.kwueve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosnen.aseaosen.kyvggq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosnen.aseaosen.mgveds.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosnen.aseaosen.qifvbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosnen.aseaosen.rzopzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosnen.aseaosen.vplhow.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosnen.aseaosen.wkjema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosnen.aseaosen.xfcbpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosnen.aseaosen.xrhzkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acaosnen.aseaosen.yxdwbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acarroll.gbtefxryt7-95m32xerr6rv.p.temp-site.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acassistan.temp.swtest.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acc-upd.myaccountswebbupdate.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaaaon.accoesccsa.axnsac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaaaon.accoesccsa.cabycv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaaaon.accoesccsa.chgcvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaaaon.accoesccsa.crhdbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaaaon.accoesccsa.etfode.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaaaon.accoesccsa.ftjaie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaaaon.accoesccsa.gnhqcy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaaaon.accoesccsa.mgveds.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaaaon.accoesccsa.mhuakn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaaaon.accoesccsa.ostzoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaaaon.accoesccsa.pobeck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaaaon.accoesccsa.rjzjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaaaon.accoesccsa.skahgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaaaon.accoesccsa.uanwtt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaaaon.accoesccsa.ufrico.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaaaon.accoesccsa.wkjema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaaaon.accoesccsa.wmtgsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaaaon.accoesccsa.xfcbpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaaaon.accoesccsa.xfflrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaaaon.accoesccsa.xrhzkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaaaon.accoesccsa.yvfari.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaaaon.accoesccsa.yxdwbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.agogog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.bfuamk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.cabycv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.crhdbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.dotmie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.dtdent.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.eakwzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.euiddi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.hijfcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.iidvtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.jrgxnf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.jutyeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.kqhhdq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.kwueve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.mhuakn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.qifvbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.qvsaen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.skahgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.thipyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.uanwtt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.ufrico.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.uyylmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.wcxbpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.wkjema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.xfflrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.xwipxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.yjmokp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.yxdwbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.zcefqg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaeon.accoccsa.ziaxaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccaseoen.acacoccnsaa.aofwip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.aajgpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.ahgcef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.bpycae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.cabycv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.eakwzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.euiddi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.ftjaie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.fxdrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.hijfcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.ifqxct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.jidlaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.jpvnhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.jsyioj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.jyshzc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.kqhhdq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.kvufus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.kyvggq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.mzhyjr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.nwnwpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.ofgnzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.rdotfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.rhokdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.rjzjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.skahgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.slkymi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.uanwtt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.vlfhkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.wcxbpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.wmtgsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.xfflrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.xzoosw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.yxdwbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceaaon.ascsesccna.zcjwnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.ahgcef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.axnsac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.byddyr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.crhdbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.dtdent.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.fghgux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.ftjaie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.gnhqcy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.hijfcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.ilgeku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.kqhhdq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.kvufus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.lywswi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.mgveds.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.mhuakn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.mpxuis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.mzhyjr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.nbzxlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.nhmobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.nwnwpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.qifvbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.qvsaen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.rdotfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.rhokdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.rjzjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.sigxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.uyylmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.wmtgsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.xfcbpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.xosxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.xwipxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accceson.ascsccna.yvfari.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acccessoen.asacsccnnaa.mpxuis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accedapara-desbloquearclavedinamica.verificarbanca.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accedi-online-bnl-clienti.dedyn.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accedi-online-com.preview-domain.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.ahgcef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.auaynk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.bqdttb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.ccfxga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.dhvppl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.eakwzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.etfode.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.fghgux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.fxdrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.ilgeku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.jhmkue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.jrgxnf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.jtrejs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.jyshzc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.kqhhdq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.ksmfpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.kyvggq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.lnntsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.nhmobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.ofgnzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.ostzoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.qvsaen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.qxykiz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.rdotfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.rzopzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.uanwtt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.vclotq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.vodlvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.wcxbpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.xelvgn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.xzoosw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.yjmokp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.ylssuj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.yvfari.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.ziaxaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaen.aseaesccen.zzqnrn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.agogog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.aofwip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.ccfxga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.euiddi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.fghgux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.iidvtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.ilgeku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.jhmkue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.jpvnhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.jrgxnf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.kyvggq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.lywswi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.mhuakn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.mpxuis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.nwnwpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.ofgnzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.qifvbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.sigxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.uanwtt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.uyylmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.vodlvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.wcxbpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.wkjagf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.wmtgsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.xqimja.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.xzoosw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.yjmokp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.yvfari.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.accaesccsa.zcefqg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.agogog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.ahtzjy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.bpycae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.bqdttb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.dwxgub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.eakwzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.ecwqvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.etfode.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.euiddi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.fxdrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.ifqxct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.iidvtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.jsyioj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.jtrejs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.jyshzc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.kqhhdq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.mgveds.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.nbzxlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.nhmobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.ofgnzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.rjzjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.sxxtpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.thipyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.uanwtt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.ufrico.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.vodlvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeaaon.ascaesccna.wkjema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.aajgpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.ahgcef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.auaynk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.bfuamk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.crhdbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.dotmie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.ecwqvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.etfode.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.jidlaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.jrgxnf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.jutyeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.jyshzc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.kvufus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.kwueve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.lnntsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.mgveds.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.nbzxlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.ostzoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.rdotfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.rhokdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.sigxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.skahgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.sxxtpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.thipyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.uanwtt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.ufrico.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.vplhow.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.wkjagf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.wmtgsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.yjmokp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.ylssuj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.yxdwbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.zcefqg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeeon.accaccsa.zzqnrn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.dotmie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.eakwzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.ecwqvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.etfode.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.euiddi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.fghgux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.gpypor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.hkvydr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.ifqxct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.iidvtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.jpvnhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.jrgxnf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.jsyioj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.kqhhdq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.kwueve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.mhuakn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.nwnwpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.qvsaen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.qxykiz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.rhokdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.vlfhkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.wcxbpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.wmtgsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.xosxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.xrhzkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.xzoosw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceenen.aseaccen.yxdwbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceesaaeon.aaccaensaccsa.euiddi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeseoen.acacaccnsaa.nhmobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.aajgpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.ahtzjy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.bfuamk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.bqdttb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.chgcvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.crhdbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.dotmie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.dtdent.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.dwxgub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.gnhqcy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.gpypor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.hsjtfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.ifqxct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.iidvtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.jhmkue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.jsyioj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.ksmfpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.kwueve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.mgveds.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.mzhyjr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.ofgnzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.qxykiz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.rdotfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.uyylmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.vodlvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.wkjema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.xfcbpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.yjmokp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.ylssuj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.yvfari.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acceeson.ascaccna.ziaxaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accepacound.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200001060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accept-ios-4f332.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accept-ios-4f332.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accesdigitalactif.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accesrewards.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accesrewards.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"access-afcu.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"access-afcu.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"access-info-app.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"access-info-app.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"access.onlineallure.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accesscdns6.qeei.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200001071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accessmt.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accessmt.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accesso.62-182-84-189.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accesso.clienti.sicuro.eshteghalepaydar.ir"; content:"Host"; http_header; classtype:attempted-recon; sid:200001075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accessobperbanca.balakshiva.com.np"; content:"Host"; http_header; classtype:attempted-recon; sid:200001076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accessobperbanca.techproj91.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accessobperbancaweb.ucuzsessistemi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accessobperclienti.hostrina.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accessobperclienti.tenlogicgroup.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accessoclientibperbanca.broadpeakadventures.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accessoclientibperbanca.candortci-webdev.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accessoclientibperbanca.eksmly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accessoclientibperbanca.elzadeltaib.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accessoclientibperbanca.ngc-courses.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accessogeocalizzatosospeso.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accessosicurezza-bp.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accessreward.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accesssrewards.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accessthepooc00in.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.ahtzjy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.aofwip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.chgcvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.crhdbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.dtdent.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.dwxgub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.eakwzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.ecwqvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.etfode.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.gpypor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.hsjtfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.jpvnhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.jrgxnf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.jsyioj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.kqhhdq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.lnntsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.lywswi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.mpxuis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.nbzxlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.rhokdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.ufrico.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.vodlvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.wcxbpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.xwipxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.yoslwq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.yvfari.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosaaen.aseaesccen.zcefqg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.aofwip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.axnsac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.bfuamk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.bpycae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.bqdttb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.dhvppl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.ecwqvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.euiddi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.ftjaie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.fxdrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.gnhqcy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.gtwkyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.hkvydr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.jhmkue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.jyshzc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.ksmfpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.kvufus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.lnntsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.nhmobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.nwnwpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.pobeck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.rhokdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.slkymi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.vodlvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.vplhow.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.wkjagf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.wmtgsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.xfcbpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.xzoosw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.yjmokp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.zcjwnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accosnen.aseaccen.zzqnrn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accossaaeen.aaseaensaccen.dtdent.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accossneen.asaeaccnean.kwueve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accossneen.asaeaccnean.skahgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"account-access-review.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"account-access-review.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"account-access-view.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"account-access-view.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"account-check.co.jp.eektrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"account-deletion-form-10033819.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"account-deletion-form-10033819.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"account-deletion-form-10061335.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"account-deletion-form-10061335.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"account-deletion-form-10061529.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"account-deletion-form-10061529.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"account-recovery-nab-au.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"account-recovery-nab-au.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"account-restriction-1000781373.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"account-restriction-1000781373.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"account-restriction-1000967754.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"account-restriction-1000967754.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"account-so-net.kyoto-gyuhide.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"account-update-info.vdrn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"account.affiliate114.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"account.huijinlu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"account.huixianliao.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"account.verifications.help-page.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200001175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accountresolvecenter.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accounts-center.csnid10000000315235311.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accounts-center.csnid1000000055510353161.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accounts.google.domain.login.baskethunt.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200001179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accountsecurity2022notice.ac"; content:"Host"; http_header; classtype:attempted-recon; sid:200001180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accountverifyatt.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acctpay-e4d1a.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accurate-squid.static.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeocon.acesoocon.agvve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeocon.acesoocon.bsqus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeocon.acesoocon.ccqtxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeocon.acesoocon.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeocon.acesoocon.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeocon.acesoocon.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeocon.acesoocon.ffbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeocon.acesoocon.fhfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeocon.acesoocon.ftbmjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeocon.acesoocon.iljwpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeocon.acesoocon.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeocon.acesoocon.kekdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeocon.acesoocon.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeocon.acesoocon.mspxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeocon.acesoocon.pfxkfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeocon.acesoocon.pjrxnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeocon.acesoocon.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeocon.acesoocon.qqvflp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeocon.acesoocon.sqglzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeocon.acesoocon.tztgfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeocon.acesoocon.ucsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeocon.acesoocon.wfhar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeocon.acesoocon.ytlvjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.agvve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.aitpjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.bdpdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.ccqtxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.ceemly.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.chjjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.dgjps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.dnjrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.etwhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.ewpfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.ftbmjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.furrqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.gggdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.hoaaip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.igevsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.iljwpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.iruwsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.kaxvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.kekdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.mmsnc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.mqiyai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.nndsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.pfxkfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.plcdyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.qngnfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.qzxmyh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.scagx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.sdej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.sikqaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.ucsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.vdub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.vmazao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.vujbr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.vxkmur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.wfpch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.xkeqac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.xklygs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.xpref.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.xrmhzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.xxijzm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaeon.aescocon.ytlvjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.agvve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.ahidtgh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.bdpdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.bsqus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.buylcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.cexa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.chjjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.dkjsg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.dmpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.etwhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.ewpfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.ffbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.fhfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.gggdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.kaxvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.lgsksl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.mmsnc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.mspxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.nndsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.pjfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.pjrxnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.plcdyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.pmcugi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.qqkagj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.scagx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.sdej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.ucsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.vujbr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.wfpch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.xgyufl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaocon.aecsoaon.xklygs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.ahictgn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.ahidtgh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.cbdunw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.cexa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.chjjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.efupod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.ftbmjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.gggdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.hxfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.igevsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.iljwpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.jkhrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.kabpze.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.kfrbvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.mmsnc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.njmxph.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.nndsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.pjfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.plcdyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.shxvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.vkjqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.vujbr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.wfhar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.xkeqac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.xklygs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.xrmhzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceaon.aesocon.ymklef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaan.aecsoecon.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaaon.acesecocro.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaeon.aesccocenon.aeduen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaeon.aesccocenon.dgjps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaeon.aesccocenon.dnjrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaeon.aesccocenon.eddqf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaeon.aesccocenon.ewnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaeon.aesccocenon.fhfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaeon.aesccocenon.gggdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaeon.aesccocenon.hoaaip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaeon.aesccocenon.hxfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaeon.aesccocenon.mqiyai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaeon.aesccocenon.nndsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaeon.aesccocenon.pfxkfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaeon.aesccocenon.piikmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaeon.aesccocenon.plcdyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaeon.aesccocenon.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaeon.aesccocenon.qzxmyh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaeon.aesccocenon.scagx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaeon.aesccocenon.vdub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaeon.aesccocenon.vujbr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaeon.aesccocenon.xgyufl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaeon.aesccocenon.xpref.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaeon.aesccocenon.xqatad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaeon.aesccocenon.yaivdx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaeon.aesccocenon.ymklef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaocon.aeccsoenaon.bdpdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaocon.aeccsoenaon.cbdunw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaocon.aeccsoenaon.ceemly.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaocon.aeccsoenaon.djbwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaocon.aeccsoenaon.dkjsg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaocon.aeccsoenaon.efupod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaocon.aeccsoenaon.etwhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaocon.aeccsoenaon.iljwpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaocon.aeccsoenaon.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaocon.aeccsoenaon.iruwsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaocon.aeccsoenaon.jkhrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaocon.aeccsoenaon.kabpze.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaocon.aeccsoenaon.kaxvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaocon.aeccsoenaon.kfrbvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaocon.aeccsoenaon.nndsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaocon.aeccsoenaon.pjfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaocon.aeccsoenaon.qngnfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaocon.aeccsoenaon.qzxmyh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaocon.aeccsoenaon.tztgfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaocon.aeccsoenaon.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaocon.aeccsoenaon.vkjqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaocon.aeccsoenaon.whcyg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaon.aesocconen.ahictgn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaon.aesocconen.bfycgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaon.aesocconen.dgddug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaon.aesocconen.jkhrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaon.aesocconen.pmcugi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaon.aesocconen.qqkagj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaon.aesocconen.qzxmyh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaon.aesocconen.vdub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaon.aesocconen.wfhar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaon.aesocconen.wfpch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaon.aesocconen.xgyufl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaon.aesocconen.xklygs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeaon.aesocconen.xzzuxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaeon.caeesccroceno.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.azdilh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoecon.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.azdilh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeean.aecsoeocnre.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.azdilh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeaon.aceseoccrone.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeocon.aecsooencon.aeduen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeocon.aecsooencon.bdpdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeocon.aecsooencon.blfqub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeocon.aecsooencon.dkjsg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeocon.aecsooencon.eddqf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeocon.aecsooencon.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeocon.aecsooencon.ennuyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeocon.aecsooencon.ewpfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeocon.aecsooencon.ftbmjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeocon.aecsooencon.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeocon.aecsooencon.jkhrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeocon.aecsooencon.nndsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeocon.aecsooencon.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeocon.aecsooencon.shxvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeocon.aecsooencon.ukjut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeocon.aecsooencon.xgyufl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeocon.aecsooencon.xqatad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeocon.aecsooencon.ytlvjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeon.aesocconen.aeduen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeon.aesocconen.ahictgn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeon.aesocconen.bdpdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeon.aesocconen.bsqus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeon.aesocconen.buylcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeon.aesocconen.cexa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeon.aesocconen.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeon.aesocconen.dkjsg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeon.aesocconen.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeon.aesocconen.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeon.aesocconen.ennuyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeon.aesocconen.ffbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeon.aesocconen.ftbmjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeon.aesocconen.furrqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeon.aesocconen.gggdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeon.aesocconen.igevsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeon.aesocconen.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeon.aesocconen.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeon.aesocconen.qqvflp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeon.aesocconen.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeon.aesocconen.whcyg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeon.aesocconen.xgyufl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeon.aesocconen.xkeqac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeeon.aesocconen.xqatad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeoa.aescooen.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aescoaoenn.ahidtgh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aescoaoenn.chjjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aescoaoenn.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aescoaoenn.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aescoaoenn.ennuyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aescoaoenn.gwumv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aescoaoenn.hxfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aescoaoenn.njmxph.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aescoaoenn.nndsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aescoaoenn.pfxkfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aescoaoenn.piikmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aescoaoenn.pjrxnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aescoaoenn.plcdyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aescoaoenn.qqvflp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aescoaoenn.qzxmyh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aescoaoenn.vdub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aescoaoenn.vxkmur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aescoaoenn.xpref.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aescoaoenn.yfpyin.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aescoaoenn.ytlvjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.agvve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.bdpdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.bsqus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.cexa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.chjjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.ctxbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.dgjps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.dmpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.dnjrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.ewnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.fhfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.gggdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.gwumv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.kaxvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.kekdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.mmsnc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.pfxkfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.piikmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.pjfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.pmcugi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.scagx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.sikqaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.ucsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.vkjqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.vujbr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.vxkmur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.wfhar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.xgyufl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.xpref.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.xzzuxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.yfpyin.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeocon.aesoocon.ymklef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.agvve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.bfycgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.blfqub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.bsqus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.cexa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.chjjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.ctxbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.dgjps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.ennuyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.fhfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.gwumv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.hxfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.jkhrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.kabpze.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.kaxvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.mspxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.nndsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.pfxkfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.plcdyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.pmcugi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.qngnfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.vkjqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesocon.xkeqac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesoocnen.aoweky.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesoocnen.bfycgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesoocnen.buylcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesoocnen.dmpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesoocnen.eddqf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesoocnen.ewnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesoocnen.ewpfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesoocnen.ftbmjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesoocnen.gggdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesoocnen.hxfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesoocnen.lgsksl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesoocnen.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesoocnen.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesoocnen.scagx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesoocnen.xgyufl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesoocnen.xkeqac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesoocnen.xklygs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesoocnen.yfpyin.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceeon.aesoocnen.ymklef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.ahictgn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.ahidtgh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.bfycgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.bsqus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.ctxbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.dgjps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.dkjsg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.etwhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.fhfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.gwumv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.hoaaip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.igevsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.jkhrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.kabpze.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.kaxvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.kekdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.lgsksl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.mspxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.nndsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.qngnfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.qqkagj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.qqvflp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.qzxmyh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.scagx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.sdej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.shxvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.sikqaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.tztgfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.ucsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.ukjut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.vkjqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.vmazao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.wfhar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.wfpch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.xczohr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.xrmhzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.yaivdx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceocon.aesoaon.ymklef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.agvve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.ahidtgh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.bdpdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.dgjps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.dnjrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.eddqf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.ewpfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.fhfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.gwumv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.jkhrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.lgsksl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.mmsnc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.pmcugi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.qqvflp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.sdej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.sikqaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.ucsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.vkjqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.vujbr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.wfhar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.wfpch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.xzzuxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aceon.aesoon.yaivdx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200001957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acerbiplatchglance.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acerbiplatchglance.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acess-ofici-fatura.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acess-wallet-stream.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acesse-bankig.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acesse-hiper.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200001963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acesso.meupersonalite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acesso.progessms.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200001965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acessodedodemo.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acessodigitalfacilnove.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200001967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acessoempresarial-emilio.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acessogalicia.azurewebsites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200001969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acessogerenciador.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acessonaturanatal.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200001971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acessorapido-banese.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acest-s1.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acgreu2c015hipouat01.eastus2.azurecontainer.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200001974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"achat.pay-sas.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200001975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"achulemarecoa.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"achulemarecoa.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acik-cekilishizmeti.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acikdeniz-internetsube-com.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200001979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acilebanon.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acjtvfzhvi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200001981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acn.unpbls.sprt-acn.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200001982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acnote002.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acnote002.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acnote003.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acnote003.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acnote004.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acnote004.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acnote005.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acnote005.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acnote006.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acnote006.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acnote007.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acnote007.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acnote008.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acnote008.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acnote009.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acnote009.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200001998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acnote010.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200001999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acnote010.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200002000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acnote011.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200002001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acnote011.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200002002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acnote012.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200002003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acnote012.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200002004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acnscure.cnfrm.scrthlp.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200002005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acoleakaze.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200002006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acom.digipix.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200002007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acs-3ds-vlsa-co.eliminates.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200002008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acs-3ds-vlsa.eliminates.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200002009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"act-actions.my.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200002010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"act-premco.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200002011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"activarpin-outlook.soporteonline00.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200002012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"activate-hulu-com-activate.sitey.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200002013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"activatesynmainnet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200002014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"activatewalt.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200002015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"activatuclavedinamica.verificarbanca.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200002016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"activeac342.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200002017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"activeacc375.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200002018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"activeacc380.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200002019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"actividad2free.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200002020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"actual.dinamicc.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200002021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"actualizardispositivo.webnode.es"; content:"Host"; http_header; classtype:attempted-recon; sid:200002022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"actualizedinamico.actualiceeclave.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200002023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acuascut.bluehoststaff.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200002024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acudata-inc.com.younghunny.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200002025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acvitatetakarek.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200002026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ad-dev.everymundo.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200002027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"adcapitals.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200002028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"adcloudserver.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200002029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"adcocody.ci"; content:"Host"; http_header; classtype:attempted-recon; sid:200002030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"addoha.ci"; content:"Host"; http_header; classtype:attempted-recon; sid:200002031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"adefi.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200002032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"adept-producer-5628.ck.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200002033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aderiamo-subito-al-nuovo-protocollo.solifapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200002034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"adesaopessoajuridica.tech"; content:"Host"; http_header; classtype:attempted-recon; sid:200002035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"adf-105772.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200002036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"adman-aoomnao0.bond"; content:"Host"; http_header; classtype:attempted-recon; sid:200002037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"admax.com.ar"; content:"Host"; http_header; classtype:attempted-recon; sid:200002038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"admin-formserviceupdates.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200002039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"admin.epochfinancialus.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200002040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"admin.nativopersona.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200002041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"admissionbackend.umse.leads.edu.pk"; content:"Host"; http_header; classtype:attempted-recon; sid:200002042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"admissions.millionlights.university"; content:"Host"; http_header; classtype:attempted-recon; sid:200002043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"adobe-document.auth-meta.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200002044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"adobepdfllc.mypixieset.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200002045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"adorablescarab.build067.wpsandbox.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200002046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"adoring-haibt.5-231-78-38.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200002047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"adoxkufmcz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200002048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"adpunemploymentclaims.sharefile.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200002049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"adrayvllqx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200002050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"adrianasite.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200002051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ads-manager-case83400917.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200002052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"adult4less.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200002053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"adv-promote.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200002054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"advancelink.easy.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200002055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"adveninternational.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200002056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"advertisingnews.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200002057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"advisorywiki.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200002058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"advsoree.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200002059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"adyikfmiso.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200002060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ae54gs.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200002061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ae8c330b-e1c4-48f5-91c0-526b9a57cc98.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200002062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeasdf.org.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200002063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.bdpdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.ctxbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.dgddug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.dkjsg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.dnjrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.eddqf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.efupod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.hoaaip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.hxfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.igevsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.kabpze.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.kaxvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.kekdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.mspxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.nndsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.pjfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.shxvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.sqglzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.tztgfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.ukjut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.vkjqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.wfhar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.wfpch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.xczohr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaocon.ascceaon.xkeqac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.aeduen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.agvve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.bfycgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.ceemly.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.cexa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.dgjps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.djbwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.eddqf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.efupod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.ewnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.ewpfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.gwumv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.hxfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.igevsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.iruwsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.jkhrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.kabpze.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.kaxvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.mmsnc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.mspxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.pfxkfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.qqkagj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.scagx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.sdej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.shxvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.sikqaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.sqglzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.ucsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.ukjut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.vdub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.vkjqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.vujbr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.wfhar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.wfpch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.xgyufl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecaon.ascecon.ymklef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceaan.ascceecon.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeceoa.ascceoen.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.aeduen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.agvve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.bdpdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.ctxbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.dkjsg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.dmpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.dnjrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.eddqf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.ewnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.ewpfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.ffbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.gwumv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.hxfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.kabpze.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.kaxvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.mspxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.pfxkfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.piikmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.pjfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.qqkagj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.scagx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.sdej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.shxvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.ucsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.vdub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.wfhar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.wfpch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.whcyg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.xklygs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.xpref.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecocon.asceaon.xrmhzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.ahidtgh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.aitpjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.bdpdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.bsqus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.cbdunw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.ccqtxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.dgjps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.djbwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.dnjrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.eddqf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.etwhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.ewnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.ffbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.gwumv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.hoaaip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.hxfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.iruwsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.kfrbvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.mspxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.pjfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.qqvflp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.qzxmyh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.scagx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.sdej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.shxvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.ucsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.ukjut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.vdub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.vujbr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.wfhar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.xgyufl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.xkeqac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.xklygs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.xpref.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aecon.asceon.yaivdx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.bsqus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.cbdunw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.ccqtxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.chjjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.ctxbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.dmpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.dnjrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.ennuyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.etwhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.ftbmjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.gwumv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.kabpze.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.mmsnc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.mqiyai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.njmxph.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.pfxkfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.pjfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.plcdyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.scagx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.sdej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.shxvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.vdub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.vujbr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.wfpch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacocon.acsceocon.xczohr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.agvve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.aitpjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.aoweky.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.bdpdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.cbdunw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.ceemly.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.ctxbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.dgjps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.dmpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.eddqf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.ewpfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.fhfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.gwumv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.hoaaip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.igevsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.iljwpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.jkhrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.kaxvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.kekdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.lgsksl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.mqiyai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.piikmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.plcdyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.shxvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.ukjut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.vdub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.vxkmur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.xczohr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeacon.asccecon.ytlvjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.agvve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.bsqus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.cbdunw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.cexa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.chjjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.ctxbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.dgddug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.djbwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.dnjrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.etwhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.gwumv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.kekdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.mspxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.njmxph.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.pjrxnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.qzxmyh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.scagx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.sikqaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.sqglzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.ucsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.ukjut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.vxkmur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.wfhar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.wfpch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.xklygs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeascn.asecccon.xxijzm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeasoccn.acsecocon.aoweky.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeasoccn.acsecocon.blfqub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeasoccn.acsecocon.cbdunw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeasoccn.acsecocon.ccqtxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeasoccn.acsecocon.ceemly.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeasoccn.acsecocon.chjjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeasoccn.acsecocon.dgddug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeasoccn.acsecocon.fhfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeasoccn.acsecocon.furrqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeasoccn.acsecocon.iruwsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeasoccn.acsecocon.njmxph.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeasoccn.acsecocon.sikqaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeasoccn.acsecocon.vkjqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeasoccn.acsecocon.xczohr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeasoccn.acsecocon.xzzuxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeasoccn.acsecocon.ymklef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaocon.asccceenaon.aeduen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaocon.asccceenaon.ahictgn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaocon.asccceenaon.bsqus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaocon.asccceenaon.cbdunw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaocon.asccceenaon.djbwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaocon.asccceenaon.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaocon.asccceenaon.etwhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaocon.asccceenaon.gggdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaocon.asccceenaon.gwumv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaocon.asccceenaon.hxfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaocon.asccceenaon.igevsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaocon.asccceenaon.nndsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaocon.asccceenaon.pjrxnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaocon.asccceenaon.qqkagj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaocon.asccceenaon.vxkmur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaocon.asccceenaon.xklygs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaocon.asccceenaon.xqatad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaocon.asccceenaon.xzzuxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaon.ascecconen.ahictgn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaon.ascecconen.aitpjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaon.ascecconen.bsqus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaon.ascecconen.chjjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaon.ascecconen.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaon.ascecconen.ewpfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaon.ascecconen.gwumv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaon.ascecconen.igevsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaon.ascecconen.kfrbvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaon.ascecconen.qngnfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaon.ascecconen.qqvflp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaon.ascecconen.sikqaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaon.ascecconen.tztgfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaon.ascecconen.vmazao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaon.ascecconen.xklygs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaon.ascecconen.xzzuxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaon.ascecconen.yaivdx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecaon.ascecconen.yfpyin.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.bsqus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.cbdunw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.dgddug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.djbwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.dmpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.etwhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.ewnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.gggdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.gwumv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.hoaaip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.hxfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.igevsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.kaxvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.nndsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.pfxkfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.piikmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.pjfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.qngnfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.shxvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.sikqaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.sqglzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.vkjqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.vmazao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.ascceaoenn.xqatad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.aeduen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.agvve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.cexa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.ctxbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.dkjsg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.ewnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.ewpfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.ffbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.fhfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.furrqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.gggdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.gwumv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.kaxvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.kekdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.mspxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.qqvflp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.sdej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.shxvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.sqglzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.ukjut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.vmazao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.wfpch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.whcyg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.xklygs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecocon.asceocon.xxijzm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.agvve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.ahidtgh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.bdpdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.bfycgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.bsqus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.ccqtxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.cexa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.chjjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.ctxbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.dgjps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.djbwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.dmpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.dnjrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.eddqf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.ftbmjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.hoaaip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.kfrbvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.lgsksl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.mqiyai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.plcdyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.shxvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.sikqaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.tztgfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.ucsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.vujbr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.wfhar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.wfpch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.xgyufl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.xrmhzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.ascecon.xzzuxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.asceocnen.ahidtgh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.asceocnen.aitpjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.asceocnen.cexa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.asceocnen.njmxph.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.asceocnen.pfxkfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.asceocnen.plcdyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.asceocnen.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.asceocnen.qzxmyh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.asceocnen.shxvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.asceocnen.sqglzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.asceocnen.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.asceocnen.xkeqac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeecon.asceocnen.xxijzm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.azdilh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaacn.acseecccro.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeaaon.acscececro.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.ahictgn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.aoweky.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.buylcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.djbwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.etwhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.ewpfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.ftbmjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.gwumv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.igevsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.iljwpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.iruwsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.kabpze.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.kaxvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.njmxph.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.pfxkfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.piikmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.pmcugi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.sdej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.sqglzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.vxkmur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.xklygs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.xpref.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.xrmhzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.yfpyin.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeacon.ascccecenon.ytlvjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeascn.aseccccenon.aitpjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeascn.aseccccenon.bfycgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeascn.aseccccenon.buylcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeascn.aseccccenon.cbdunw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeascn.aseccccenon.cexa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeascn.aseccccenon.chjjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeascn.aseccccenon.ctxbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeascn.aseccccenon.dgjps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeascn.aseccccenon.dmpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeascn.aseccccenon.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeascn.aseccccenon.ewpfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeascn.aseccccenon.ftbmjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeascn.aseccccenon.iljwpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeascn.aseccccenon.jkhrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeascn.aseccccenon.kekdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeascn.aseccccenon.njmxph.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeascn.aseccccenon.scagx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeascn.aseccccenon.tztgfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeascn.aseccccenon.xczohr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeascn.aseccccenon.xgyufl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeascn.aseccccenon.xklygs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeascn.aseccccenon.xqatad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceecon.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecan.ascceeocnre.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecaon.acsceeccrone.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.agvve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.aoweky.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.bdpdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.blfqub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.cbdunw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.cexa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.chjjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.ctxbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.dmpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.dnjrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.efupod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.ennuyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.ewpfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.ftbmjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.igevsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.kekdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.kfrbvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.lgsksl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.mspxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.njmxph.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.pjrxnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.pmcugi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.sdej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.tztgfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.ukjut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.vdub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.xczohr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.xpref.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecocon.ascceoencon.xrmhzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecon.ascecconen.ahictgn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecon.ascecconen.djbwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecon.ascecconen.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecon.ascecconen.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecon.ascecconen.gwumv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecon.ascecconen.iljwpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecon.ascecconen.mqiyai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecon.ascecconen.plcdyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecon.ascecconen.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecon.ascecconen.vkjqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecon.ascecconen.vmazao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecon.ascecconen.wfhar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeecon.ascecconen.xzzuxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacn.acseecccrone.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200002999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeacon.casecccreceno.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeaon.acsceeccrone.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.azdilh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeeeascn.caseeccrcceno.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.azdilh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesacn.acseecccrone.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.azdilh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.ascececon.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesan.asceceocnre.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeescn.aseccconen.ahictgn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeescn.aseccconen.cexa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeescn.aseccconen.ctxbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeescn.aseccconen.dmpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeescn.aseccconen.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeescn.aseccconen.ewnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeescn.aseccconen.fhfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeescn.aseccconen.jkhrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeescn.aseccconen.lgsksl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeescn.aseccconen.mqiyai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeescn.aseccconen.nndsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeescn.aseccconen.pjrxnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeescn.aseccconen.qqkagj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeescn.aseccconen.shxvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeescn.aseccconen.tztgfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeescn.aseccconen.ucsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeescn.aseccconen.vdub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeescn.aseccconen.xgyufl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeescn.aseccconen.xkeqac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeescn.aseccconen.xqatad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeescn.aseccconen.xxijzm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesoccn.ascecoencon.ahictgn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesoccn.ascecoencon.dgddug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesoccn.ascecoencon.dmpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesoccn.ascecoencon.etwhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesoccn.ascecoencon.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesoccn.ascecoencon.jkhrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesoccn.ascecoencon.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesoccn.ascecoencon.pjrxnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesoccn.ascecoencon.shxvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesoccn.ascecoencon.sqglzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesoccn.ascecoencon.ucsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesoccn.ascecoencon.whcyg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesoccn.ascecoencon.xkeqac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesoccn.ascecoencon.xrmhzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeeesoccn.ascecoencon.ytlvjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesaccon.asccecenaon.bdpdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesaccon.asccecenaon.buylcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesaccon.asccecenaon.cbdunw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesaccon.asccecenaon.dgjps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesaccon.asccecenaon.eddqf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesaccon.asccecenaon.efupod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesaccon.asccecenaon.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesaccon.asccecenaon.fhfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesaccon.asccecenaon.gwumv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesaccon.asccecenaon.igevsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesaccon.asccecenaon.nndsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesaccon.asccecenaon.vkjqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesaccon.asccecenaon.vujbr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesaccon.asccecenaon.vxkmur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesaccon.asccecenaon.whcyg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesaccon.asccecenaon.xczohr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesaccon.asccecenaon.xrmhzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesaccon.asccecenaon.ytlvjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesacn.aseccconen.dgddug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesacn.aseccconen.ewpfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesacn.aseccconen.ffbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesacn.aseccconen.gwumv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesacn.aseccconen.iljwpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesacn.aseccconen.kaxvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesacn.aseccconen.mqiyai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesacn.aseccconen.pjfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesacn.aseccconen.pjrxnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesacn.aseccconen.plcdyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesacn.aseccconen.pmcugi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesacn.aseccconen.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesacn.aseccconen.tztgfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesacn.aseccconen.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesacn.aseccconen.ukjut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesacn.aseccconen.vujbr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesacn.aseccconen.vxkmur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesacn.aseccconen.whcyg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesacn.aseccconen.ytlvjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesccon.aseccaoenn.aoweky.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesccon.aseccaoenn.buylcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesccon.aseccaoenn.cbdunw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesccon.aseccaoenn.dgjps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesccon.aseccaoenn.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesccon.aseccaoenn.dnjrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesccon.aseccaoenn.iljwpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesccon.aseccaoenn.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesccon.aseccaoenn.kabpze.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesccon.aseccaoenn.kfrbvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesccon.aseccaoenn.lgsksl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesccon.aseccaoenn.njmxph.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesccon.aseccaoenn.nndsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesccon.aseccaoenn.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesccon.aseccaoenn.qqvflp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesccon.aseccaoenn.tztgfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesccon.aseccaoenn.xpref.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesccon.aseccaoenn.yaivdx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.ahidtgh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.bdpdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.bsqus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.chjjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.ctxbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.djbwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.dmpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.eddqf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.efupod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.etwhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.fhfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.iruwsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.kabpze.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.lgsksl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.mmsnc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.mspxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.njmxph.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.pjfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.pjrxnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.qqkagj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.scagx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.tztgfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.wfpch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.aseccon.xxijzm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.asecocnen.aitpjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.asecocnen.bfycgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.asecocnen.ccqtxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.asecocnen.cexa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.asecocnen.dgjps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.asecocnen.dmpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.asecocnen.dnjrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.asecocnen.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.asecocnen.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.asecocnen.iruwsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.asecocnen.kaxvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.asecocnen.mmsnc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.asecocnen.njmxph.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.asecocnen.piikmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.asecocnen.sdej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.asecocnen.vmazao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.asecocnen.xqatad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.asecocnen.xrmhzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeescn.asecocnen.ymklef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.ahidtgh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.aoweky.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.bdpdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.chjjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.ctxbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.dkjsg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.dmpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.eddqf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.ffbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.ftbmjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.hxfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.igevsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.kaxvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.kekdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.kfrbvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.mqiyai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.nndsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.pjfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.qqvflp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.sdej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.vkjqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.vmazao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.vujbr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.wfpch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeesoccn.asecocon.xxijzm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aefyouiagz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200003476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aegnet-mirai.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aemwfueger.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200003478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.ahtzjy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.aofwip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.chgcvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.crhdbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.dhvppl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.dotmie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.eakwzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.gpypor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.hijfcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.hkvydr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.jhmkue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.jpvnhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.jtrejs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.jyshzc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.kqhhdq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.ksmfpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.mhuakn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.mpxuis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.qifvbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.qvsaen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.rhokdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.sigxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.skahgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.vlfhkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.vodlvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.wcxbpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.wkjagf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.xfflrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.xwipxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceaaon.ascseseona.yvfari.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.auaynk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.axnsac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.dotmie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.fghgux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.ftjaie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.fxdrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.gpypor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.hkvydr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.ilgeku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.jhmkue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.jidlaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.kqhhdq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.kwueve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.lnntsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.mpxuis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.ostzoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.qifvbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.qvsaen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.rhokdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.vodlvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.vplhow.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.wkjema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.xfcbpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.xfflrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.xrhzkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.xwipxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.xzoosw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoceson.ascseona.zzqnrn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.agogog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.ahgcef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.ahtzjy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.aofwip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.bpycae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.dhvppl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.dotmie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.ecwqvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.etfode.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.ftjaie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.fxdrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.jrgxnf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.kqhhdq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.ksmfpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.mzhyjr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.nbzxlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.qxykiz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.rdotfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.sigxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.thipyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.uyylmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.vlfhkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.wcxbpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.wkjema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.yjmokp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.yvfari.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeaaon.ascaesaona.zcjwnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.aajgpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.ahgcef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.bfuamk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.cabycv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.ecwqvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.hkvydr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.hsjtfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.jidlaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.jrgxnf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.jsyioj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.jtrejs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.kwueve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.mzhyjr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.nwnwpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.rdotfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.sigxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.skahgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.vclotq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.vlfhkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.vodlvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.vplhow.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.wkjema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.wmtgsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.xelvgn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.xosxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.ylssuj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeeson.ascaaona.zzqnrn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeessoen.asacaaonnaa.ahgcef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeoeessoen.asacaaonnaa.ilgeku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeon-dudu124.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200003593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeon-japan.fun"; content:"Host"; http_header; classtype:attempted-recon; sid:200003594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeon-japan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeon000.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeon368.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200003597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeor.winee.life"; content:"Host"; http_header; classtype:attempted-recon; sid:200003598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aergstroma.gbtefxryt7-95m32xerr6rv.p.temp-site.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200003599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aerospacesses.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.aeduen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.agvve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.ahictgn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.aitpjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.bdpdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.bfycgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.cbdunw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.ccqtxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.cexa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.chjjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.ctxbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.dgjps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.dmpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.dnjrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.etwhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.ewnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.ewpfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.ffbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.gggdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.hoaaip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.jkhrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.lgsksl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.mqiyai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.mspxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.nndsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.pjfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.qqkagj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.sdej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.ukjut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.vdub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.vkjqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.vxkmur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.wfhar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.wfpch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.whcyg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.xczohr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.xpref.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.yfpyin.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesaccon.ascecaon.ymklef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.aeduen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.ahidtgh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.aitpjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.bfycgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.bsqus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.cbdunw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.cexa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.ctxbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.dkjsg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.eddqf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.ewpfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.ffbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.fhfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.gggdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.gwumv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.hoaaip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.igevsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.iruwsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.kabpze.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.mmsnc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.njmxph.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.nndsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.pfxkfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.pjrxnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.shxvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.tztgfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.ukjut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.vkjqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.vujbr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.wfpch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.whcyg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.xczohr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesacn.aseccon.yaivdx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.agvve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.aoweky.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.bdpdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.buylcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.cbdunw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.ccqtxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.ceemly.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.ctxbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.djbwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.dkjsg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.dnjrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.eddqf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.etwhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.ewnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.fhfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.iruwsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.jkhrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.kabpze.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.kekdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.mmsnc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.pjfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.pjrxnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.qqvflp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.qzxmyh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.scagx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.sdej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.ucsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.vmazao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.vxkmur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.wfhar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.xkeqac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.xpref.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesccon.asecaon.yfpyin.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.aeduen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.agvve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.aitpjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.bdpdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.chjjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.dgjps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.djbwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.dkjsg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.dmpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.dnjrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.ennuyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.ewpfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.ffbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.gwumv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.hoaaip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.hxfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.iljwpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.jkhrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.lgsksl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.mqiyai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.mspxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.njmxph.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.nndsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.pjfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.qngnfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.scagx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.sikqaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.sqglzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.ucsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.wfhar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.xgyufl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.xpref.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.xrmhzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aescn.asecon.xxijzm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseaan.ascececon.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeseca.aseccoen.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aesoesn.aseoseseacn.qxkahc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aestheticclinicgroup.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aetrox5.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200003851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aeu.formstack.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"afcu-sign.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200003853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"afcu-sms.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"afcu-x.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"afeadfgc.odoo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"affenetiyplusl.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200003857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"afftxfncxf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200003858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"afirmei.com.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200003859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aflgqiyqsf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200003860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"afp--futuro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aframepotteryca.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"africancatssafaris.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"afrme.com.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200003864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"afterpay.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200003865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aftral.8997.tetline.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"afv09k.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200003867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"afyllyqhku.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200003868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agathazacess.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agautomoveisbrazz.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agence-88069.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agence-88069.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200003872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agencenote003.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agencenote003.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200003874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agencenote009.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agencenote009.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200003876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agencesgwn001.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agencesgwn001.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200003878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agencesgwn004.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agencesgwn004.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200003880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agencesgwn005.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agencesgwn005.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200003882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agencesgwn009.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agencesgwn009.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200003884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agencesgwn011.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agencesgwn011.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200003886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agent.bhiflyk69875.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200003887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agent.deutschemkgw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agent.kpdgmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200003889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aggiustatore.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agihcdllbb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200003891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agoda.lovestoblog.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agodapools.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agodarentacar.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agonizingroyalexecutables.nastermilerimm.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200003895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agorainvest.x10.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200003896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agreatstaffingcompany.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agresmod.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agri-cole-fr-t-i.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200003899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agri3nouveau.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agricole-com.preview-domain.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agrisecurpas.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200003902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agriyansconec.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agriyansconec.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200003904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agrnbimyqh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200003905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agroblockchain.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200003906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agrofertilizertech.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ahadconsultancy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ahdkmotgne.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200003909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ahhhh.pe.kr"; content:"Host"; http_header; classtype:attempted-recon; sid:200003910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ahimid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ahjrdolpav.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200003912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ahxfgfexqz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200003913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ahyem.hortcy.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200003914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aib-loginwebapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aiiegro.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200003916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aiirugvazn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200003917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ailapersonalloans.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"airdrop-opensea.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"airdrop.1inch-lab.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200003920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"airdrop.consenyslabs.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200003921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"airdrop.layerzeronetwork.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200003922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"airdrop.optimismlabs.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200003923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"airdrop.suilabs.fi"; content:"Host"; http_header; classtype:attempted-recon; sid:200003924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"airdroppancake.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200003925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"airhohvvtp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200003926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"airsoft-emporium.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200003927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aitkbbqnud.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200003928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aiuopany.manjgf.club"; content:"Host"; http_header; classtype:attempted-recon; sid:200003929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aivazovsky.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200003930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aiwywwfvwt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200003931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aiyiwkkash.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200003932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aj7tv1.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200003933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ajconstructioncorp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ajholmesmusic.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ajljxhqvjj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200003936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ajudacontabilsadv.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ajvxoemtoi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200003938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ajxsqclfwf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200003939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"akamdebrzv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200003940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"akanksha3012.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200003941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"akatale.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200003942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"akbzdcwlxy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200003943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"akemidentalspecialists.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"akeqdevmup.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200003945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"akjnju.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aklab1.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aklmuohgfj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200003948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aks34.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200003949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aktiviraite-mtoken.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aktualisierung-sparkas.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200003951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aktualizacja.jst.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200003952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"al-shahed.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"al1l1i.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200003954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alarabi-kw.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alareentading-catalog.page.tl"; content:"Host"; http_header; classtype:attempted-recon; sid:200003956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"albaraka-bank.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200003957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"albel.intnet.mu"; content:"Host"; http_header; classtype:attempted-recon; sid:200003958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"albemarne.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"albertoliviera014.outgrow.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200003960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aldana.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200003961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aleinformaticabraz.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aleranse.bond"; content:"Host"; http_header; classtype:attempted-recon; sid:200003963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alerta-accesoclientes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alerta-davivienda-daviplata.daviplata21.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200003965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alerta-novobanco-movil.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alertadeseguridad.outlookpeligro.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200003967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alertas-bancofalabella.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alertasynotificacionesbancolombia.bancolonbiap.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200003969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alertasynotificacioness.desbloqueodinam.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200003970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alertasynotificacionessucursal.bancolonbiap.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200003971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alerts.department.improvement.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200003972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aleskalig.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alexcolife.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alexpadprinting.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200003975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alfachange.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200003976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"algerclub.mintcollab.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"algernetwork.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"algotextil.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200003979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alhdbhcqzw.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alhdbhcqzw.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200003981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alidaled.com.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200003982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alifetouch.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alignsupportservices.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200003984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alinafischer.clickfunnels.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alinstantecon.imprenditorecomunicatore.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alitjvycme.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200003987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alittlemoretime.za.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alkhayaringroup.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alkosign.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200003990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"allbrowardanimalremoval.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"allcountylandsurveyor.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"allegrolokal-dostawa-pl2773.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200003993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alleqrolokalnie.153221255455.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200003994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alleqrolokalnie.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200003995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alliancevaletservices.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alliantcuonl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alliedtrustonlinebank.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alliiant.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200003999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"allvancouvermls.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"almacenelpunto.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"almawaveshopee.beedoo.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200004002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aloneopp.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200004003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alpacaranchhouse.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alsanati.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alsarrajjewellery.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alshaiya-kw.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alshaya6259.zendesk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alsofft.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"altecmetalltechnik-energiasolar.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"altf2.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"althpotaqn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200004012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"altunhaliyikama.com.tr"; content:"Host"; http_header; classtype:attempted-recon; sid:200004013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"altyazicevir.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aluhqyzkwc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200004015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alyss.trahoon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"am-fcu.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amacpertner.publicvm.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amansari-artgallery.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amaozn.ywcimei.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amazaon.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200004021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amazingimaginativeweb--bacenlinea.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200004022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amazomomfpmuahgnkonyol.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200004023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amazon-co-jp-service.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amazon-interruption.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amazon-ix.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200004026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amazon.amaazon.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200004027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amazon.co.jp.zp29.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200004028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amazon.mirr1.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200004029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amazon.rtyeeqcvba.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200004030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amazon.y4lkwb.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200004031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amazon3a.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200004032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amazonarabic.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200004033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amazoncojp.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200004034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amazoninternal.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200004035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amazonzo.club"; content:"Host"; http_header; classtype:attempted-recon; sid:200004036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ambrrygen.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ambrus-studio.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200004038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ambrygen.care"; content:"Host"; http_header; classtype:attempted-recon; sid:200004039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amdjalepo.itenlo.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200004040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ame-digital-americanasfimdeano.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ame-relampago.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ameblackfridayofertas.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amebrasilblackfriday.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amefamilia.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ameli-assurancesante.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200004046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ameli-online.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200004047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ameli-renouvellementcartevitale.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200004048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ameli-secugouv.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200004049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ameli-vitale-info.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200004050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amelicartevitale2022.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ameliweb-assurevitale.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amenfashion.za.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ameofertasamericana.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amepromocaosemana.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amepromocoesdasemana.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"americafirst.d1w.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200004057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"americanalojas.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"americanas.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200004059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"americanasblacfriday.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"americanasgra.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200004061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"americanasmesblackfriday.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"americanaspromocao.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"americanexpress.ceartavimbomukiccom.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200004064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"americanfirstcreditunion-54f8d.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"americanfirstcreditunion-54f8d.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ameviagem.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amex.zgdjd.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amexe.lovehuayi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amfcsign.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amfcsign.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amfcu-init.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amfcu-init.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amidabuli.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amigopoczta.kylos.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200004075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amil.sistemadeindicacoes.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200004076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amirhameed.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amk.office-manatsu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amkzvf.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200004079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amlbot.eu"; content:"Host"; http_header; classtype:attempted-recon; sid:200004080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amm-uni.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ammarmagic.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200004082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ammazons.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200004083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amnzsasaa.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200004084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amosleh.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amowldrqdj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200004086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amozozhnou.co.jp.aijxttp.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200004087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amozozhnou.co.jp.fvnrjkb.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200004088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ampunbanaa.topijerami.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200004089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amreeth.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200004090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amtrakaccount.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amusingauthobancolombniavirtual.sucursal01.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200004092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amyotphoto.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amzanao.co.ip.penidan.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200004094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amzanao.co.ip.tohaneity.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200004095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amzooi.abfbcga.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200004096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amzow.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"analopez.com.py"; content:"Host"; http_header; classtype:attempted-recon; sid:200004098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"analytics-reset-cache.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"analytics-reset-cache.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anamin.ohsbwet.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200004101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anandsr-dev.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200004102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anantaseguridad.es"; content:"Host"; http_header; classtype:attempted-recon; sid:200004103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anapestic-endless.easterndns.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anapolisemprego.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200004105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anarchitecturestudio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anasathalassas.gr"; content:"Host"; http_header; classtype:attempted-recon; sid:200004107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anata.mlnts.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anazom.co.ip.pznycl6n7f.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anazom.co.ip.zkin0s512d.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anazom.co.jp.zxgzrr.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200004111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ancient-glade-76e4.tralside5454.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200004112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ancient-quee6173.tmp6n9c0.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200004113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ancient.tybocas.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200004114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"andalusstudio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"andiegijom.website"; content:"Host"; http_header; classtype:attempted-recon; sid:200004116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"andinorealestate.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"andreraragon.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anfnsd.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anfrage-freischalten.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200004120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anfrage-notwendig.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"angelicspicydebugmonitor--argentin.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200004122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"angelydigital.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"angindatanglahh.martulangsore.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200004124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"angle.niceous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"angry-heyrovsky.185-62-58-36.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200004126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"angry-payne-c683c7.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"angrycat.your-mint.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200004128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"angrydinosnft.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200004129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"animazer-nft.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anjalijha167.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200004131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anmelden-konto-banking-dkb.serveusers.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anmelden-spk.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200004133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"annemariemitchell.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"annualregulargeeklog.y53342.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200004135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anomaliaappmobile.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anphatcompany.com.vn"; content:"Host"; http_header; classtype:attempted-recon; sid:200004137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anrremovals.co.za"; content:"Host"; http_header; classtype:attempted-recon; sid:200004138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"answeecycling.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200004139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"antecipa-novembro-black.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"antecipablackfriday2022.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"antiquepopcornmuseum.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"antlertrader.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"antonucciandco.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anxiouscol--233112.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200004145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anydeslk.biblegiftcatalog.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anytimecourier.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200004147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anz-ref7136.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anz-ref7136.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anz-web-app.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aol-101082.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aol-106630.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aol-108796-102378aolmail.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aol-member-security9282.sharep0int-microsoftonline.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200004154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aol125393.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200004155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aolweb.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200004156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aolxperience.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aop-am.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200004158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aorangefr.s3.eu-west-3.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aourycjpxb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200004160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ap-bombcrypto-ol.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ape-club.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200004162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ape-swap.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apecoinreward.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apelive.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200004165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apeplanetclub.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apexcarparts.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200004167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"api-goog-ln.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"api-poocoinapps-tk.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"api.51.fi"; content:"Host"; http_header; classtype:attempted-recon; sid:200004170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"api.coinsnode.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200004171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"api.saisoncard.co.jp.wmqp.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200004172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apiens.vip-mint.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200004173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apipoocoin-tk.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apiscinabrazw.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apiwhesgooe4560.page.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200004176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apkinstagram.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aplacados.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200004178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aplica-soluciones.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aplicacion2.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200004180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apllus-jp.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200004181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aplus.co.jp.supportcojp.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200004182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apoyosbienestar.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app--bombcrypto-io--acess.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app--webpersopich.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200004185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-1inch.win"; content:"Host"; http_header; classtype:attempted-recon; sid:200004186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-1lnch.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200004187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-7b3a0ef7-42bc-4d78-ba12-7e72bbacc8b6.cleverapps.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200004188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-aave.com.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200004189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-aave.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200004190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-aloalmio1.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200004191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-aloamon1.biz"; content:"Host"; http_header; classtype:attempted-recon; sid:200004192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-awaanoon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-axie.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-c5b1b83e-080c-4ec5-b305-9a1f90b0ab34.cleverapps.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200004195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-champlin.ibgxavbjvg-58e60vqrn4d7.p.temp-site.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200004196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-ebert.pucwbybiih-xlm418xlx3dy.p.temp-site.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200004197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-galagmes-ip.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-id6016.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-id6016.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-id8109.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-id8109.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-mobox-login.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-openseo.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200004204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-poly-g0nwebsite.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-shapeshifit.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-stoltenberg.eeve4e0gc7-yk26evzeg379.p.temp-site.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200004207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-suncorp.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-sushi.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200004209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-sushiswap.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200004210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-sushiswap.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200004211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-trustpad.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-uhlswop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-uniswap.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200004214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app-webmailarl56hykr0ul4ufic4vrjw.contato.store"; content:"Host"; http_header; classtype:attempted-recon; sid:200004215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app.20-236-85-153.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app.43-225-110-107.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app.aavebin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app.aavebin.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200004219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app.aavve.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200004220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app.assessmentgenerator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app.ctndigital.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200004222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app.dotmac.ng"; content:"Host"; http_header; classtype:attempted-recon; sid:200004223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app.fatucredi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app.formbuilder.ai"; content:"Host"; http_header; classtype:attempted-recon; sid:200004225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app.giveaway-1inch.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200004226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app.hubgdpr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app.importsnode.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app.instantfix.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200004229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app.magiceden-hello-nfts.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app.moneylinecreditcorporation.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app.rasibintang.net.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200004232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app.singlelink.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200004233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app.souk-fes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app.speedywaiver.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200004235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app.sugarsync.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app.waiverforever.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app1inch.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200004238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app1lnch.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200004239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app42.host"; content:"Host"; http_header; classtype:attempted-recon; sid:200004240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appasarkaget.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200004241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appbcp-peru.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appbtconnect.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200004243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appeal-check.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appeal-check.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appeal-checking-109232.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appeal-checking-109232.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appeal-formforbusiness100231.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appeal-formforbusiness100231.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appeal-status-10006428795.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appeal-status-10006428795.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appeal-status-10034778951158.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appeal-status-10058946773156.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appeal-status-10058946773156.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appeal-status-10073846583.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appeal-status-10073846583.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appeal11873212123.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200004257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appfimdeanodohexaa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apphiperdigital.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appissueresolve.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apple-authenticate-au.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apple-contactless-review.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"application-status.paiza-user-basic.cloud"; content:"Host"; http_header; classtype:attempted-recon; sid:200004263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"application.axisbank.co.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200004264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apply.giveaway-1inch.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200004265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appora.sviluppo.host"; content:"Host"; http_header; classtype:attempted-recon; sid:200004266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apppaginawebempresascalxao.northeurope.cloudapp.azure.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apppinchinchincha-com.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apprehensivebogusoutsourcing.ssamaamasa.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200004269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appreter.rf.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200004270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apprivermacd.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apprivermacd.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"approva24.sslblindado.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apps.intactinsurance.com.waa.com.admissionsthinker.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apps.ipae.pe"; content:"Host"; http_header; classtype:attempted-recon; sid:200004275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apps.qattanfoundation.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200004276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appsctrl01.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appsctrl01.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appsctrl02.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appsctrl02.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appsctrl03.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appsctrl03.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appsctrl04.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appsctrl04.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appsctrl05.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appsctrl05.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appsctrl06.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appsctrl06.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appsctrl07.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appsctrl07.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appsctrl08.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appsctrl08.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appsctrl09.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appsctrl09.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appsctrl10.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appsctrl10.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appsloor7ki.site.global.prod.fastly.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200004297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appstaaking.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appstaking.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appsuite.currentplug.bar"; content:"Host"; http_header; classtype:attempted-recon; sid:200004300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appupravinexports.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appvaults.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200004302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appwonderlandmoney.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200004303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apresasasa.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200004304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aprobadoahoraaqui.usedcomputer.asia"; content:"Host"; http_header; classtype:attempted-recon; sid:200004305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aproveite-acessooutubro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aps4fn.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200004307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apsei.org.pt"; content:"Host"; http_header; classtype:attempted-recon; sid:200004308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aptclaiming.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aptosevent.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200004310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aptosfond.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200004311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aptosiab.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aptosvaults.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aqcdrnatsd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200004314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aqdeppibfk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200004315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aqljrmyavx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200004316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aquarelle.es"; content:"Host"; http_header; classtype:attempted-recon; sid:200004317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aquimillon.adquirirtucupo.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200004318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aqzmpbtdjv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200004319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ar-rvest.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ar-rvest.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ar5cz6.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200004322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"arabianoasis.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200004323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"arafathrumman.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200004324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aramex-confirmation.com.ae.shubhkarman.ae"; content:"Host"; http_header; classtype:attempted-recon; sid:200004325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aranhid.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200004326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"archcupbearer-isothermic-viver.s3.eu-central-003.backblazeb2.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ardentig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"area-clienti-presenti-delle-comunicazioni.rpsconstrucao.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200004329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"arkol.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200004330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"arlindovsky.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200004331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"armansimpson.bond"; content:"Host"; http_header; classtype:attempted-recon; sid:200004332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"arnaldolanches.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"arnaz0n.nmrde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"arnazcn-co.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"arnaznco.jpaplsignmlopcnidslpapelmaxlcheck.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200004336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"arnazon.yunnr.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200004337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"arquiveirohiper.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"arre-9do.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200004339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"arrozsabanero.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"arsmtpxxxxx7.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"arsmtpxxxxx8.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"arsmtpxxxxx9.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"artblocks-fidenza.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200004344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"artblocks.contraction.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200004345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"artdfcs.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"artgobbers.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"arthamahotels.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"arub-service.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200004349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aruba-authenticationserver.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200004350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aruba-it.jacobi-os.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200004351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aruba-pec.hausendruck.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200004352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aruba.id-authsecureapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aruba.service-auth-servapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aruba.techsys-id.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"arue.pf"; content:"Host"; http_header; classtype:attempted-recon; sid:200004356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"as-albahri.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200004357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"as9192030.liveblog365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200004358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asa-q98.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200004359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.agogog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.axnsac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.byddyr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.cabycv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.ccfxga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.crhdbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.eakwzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.ecwqvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.ftjaie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.gpypor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.gtwkyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.hsjtfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.jyshzc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.kvufus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.lywswi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.mpxuis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.mzhyjr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.nhmobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.qvsaen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.rzopzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.sigxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.skahgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.xelvgn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.xfflrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.xqimja.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.xwipxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.yvfari.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaaaon.accoesoesa.zcefqg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaeon.accooesa.agogog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaeon.accooesa.auaynk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaeon.accooesa.bfuamk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaeon.accooesa.byddyr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaeon.accooesa.dwxgub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaeon.accooesa.ecwqvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaeon.accooesa.ftjaie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaeon.accooesa.gnhqcy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaeon.accooesa.hijfcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaeon.accooesa.hsjtfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaeon.accooesa.jidlaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaeon.accooesa.jpvnhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaeon.accooesa.jyshzc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaeon.accooesa.ksmfpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaeon.accooesa.lywswi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaeon.accooesa.mpxuis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaeon.accooesa.qvsaen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaeon.accooesa.slkymi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaeon.accooesa.sxxtpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaeon.accooesa.ufrico.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaeon.accooesa.vplhow.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaeon.accooesa.wkjema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaeon.accooesa.xelvgn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaeon.accooesa.xrhzkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaeon.accooesa.yxdwbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asccaseoen.acacooensaa.vlfhkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.ahgcef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.ahtzjy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.bfuamk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.bpycae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.byddyr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.cabycv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.ccfxga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.chgcvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.dtdent.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.fghgux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.ifqxct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.ilgeku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.jpvnhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.jsyioj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.jutyeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.ksmfpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.kyvggq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.lnntsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.lywswi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.ostzoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.pobeck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.qifvbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.rhokdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.rjzjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.uanwtt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.ufrico.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.wkjema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.wmtgsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.xfflrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeaaon.accaesaesa.xosxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.axnsac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.dotmie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.etfode.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.euiddi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.hijfcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.hkvydr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.ilgeku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.jutyeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.kvufus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.kwueve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.kyvggq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.lywswi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.nwnwpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.ofgnzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.qifvbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.qxykiz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.rdotfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.rzopzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.skahgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.sxxtpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.thipyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.ufrico.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.wcxbpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.wkjema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.wmtgsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.xosxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.xzoosw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.yjmokp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asceeeon.accaaesa.yoslwq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ascqwgfekd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200004473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ascxpzckkj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200004474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asdaqwg.linkpc.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200004475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asdas12dfw.line.pm"; content:"Host"; http_header; classtype:attempted-recon; sid:200004476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asdrewd.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200004477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.aitpjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.bdpdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.bsqus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.buylcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.dgjps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.djbwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.etwhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.ewnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.fhfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.ftbmjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.hoaaip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.iruwsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.kabpze.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.kaxvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.sdej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.shxvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.ukjut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.vdub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.vkjqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.vxkmur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.wfhar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.wfpch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.xpref.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeocon.accseocso.yfpyin.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.aeduen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.blfqub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.buylcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.cexa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.chjjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.ctxbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.dgjps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.dnjrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.eddqf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.efupod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.ewpfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.fhfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.igevsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.jkhrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.kekdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.kfrbvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.mqiyai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.mspxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.pfxkfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.pjfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.plcdyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.qqkagj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.qqvflp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.sdej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.shxvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.ucsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.vkjqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.wfhar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.whcyg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.xpref.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaeon.acscecso.ymklef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.aitpjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.bdpdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.bsqus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.cexa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.dgddug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.dgjps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.dkjsg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.dmpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.eddqf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.etwhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.ewpfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.fhfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.ftbmjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.gggdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.gwumv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.mmsnc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.mspxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.pfxkfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.pjfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.pjrxnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.qzxmyh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.shxvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.vdub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.vujbr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.vxkmur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.xgyufl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.xkeqac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.xzzuxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.yfpyin.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaocon.accseaso.ymklef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.aeduen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.ahidtgh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.aitpjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.bdpdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.cexa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.ctxbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.dgddug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.dgjps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.djbwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.dkjsg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.eddqf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.ewnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.ewpfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.ffbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.gggdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.gwumv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.hxfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.jkhrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.kfrbvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.mmsnc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.mspxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.nndsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.pjfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.plcdyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.scagx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.sdej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.vdub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseaon.acsecso.wfhar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.azdilh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaan.accseecso.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.azdilh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaaon.accsececrs.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.aoweky.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.bsqus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.buylcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.cbdunw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.dgjps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.djbwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.dnjrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.eddqf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.efupod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.ennuyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.ffbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.hxfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.igevsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.jkhrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.kabpze.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.plcdyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.qqkagj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.vujbr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.vxkmur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.whcyg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.xczohr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.xklygs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.xqatad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.xrmhzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.yaivdx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaeon.acsccecenso.ymklef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.bfycgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.blfqub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.cexa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.chjjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.dgddug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.eddqf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.ewnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.ffbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.hxfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.kabpze.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.kekdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.njmxph.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.pjfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.pjrxnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.qqkagj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.qqvflp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.qzxmyh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.scagx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.sikqaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.tztgfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.ucsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.vdub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.vkjqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.vujbr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.whcyg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.xgyufl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaocon.acccseenaso.yfpyin.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaon.acseccsoen.bsqus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaon.acseccsoen.cbdunw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaon.acseccsoen.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaon.acseccsoen.dkjsg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaon.acseccsoen.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaon.acseccsoen.mmsnc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaon.acseccsoen.nndsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaon.acseccsoen.pjfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaon.acseccsoen.pjrxnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaon.acseccsoen.pmcugi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaon.acseccsoen.qzxmyh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaon.acseccsoen.sikqaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaon.acseccsoen.tztgfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaon.acseccsoen.vmazao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaon.acseccsoen.vxkmur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaon.acseccsoen.xzzuxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeaon.acseccsoen.yaivdx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.azdilh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaeon.cacesccrecens.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseecso.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeean.accseescore.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeaon.accseeccrsoe.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeocon.accseoencso.aeduen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeocon.accseoencso.ahictgn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeocon.accseoencso.aitpjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200004999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeocon.accseoencso.blfqub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeocon.accseoencso.ctxbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeocon.accseoencso.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeocon.accseoencso.eddqf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeocon.accseoencso.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeocon.accseoencso.ffbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeocon.accseoencso.fhfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeocon.accseoencso.ftbmjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeocon.accseoencso.gggdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeocon.accseoencso.jkhrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeocon.accseoencso.pmcugi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeocon.accseoencso.sdej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeocon.accseoencso.ukjut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeocon.accseoencso.vujbr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeocon.accseoencso.wfpch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeon.acseccsoen.agvve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeon.acseccsoen.aoweky.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeon.acseccsoen.blfqub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeon.acseccsoen.ccqtxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeon.acseccsoen.chjjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeon.acseccsoen.efupod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeon.acseccsoen.etwhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeon.acseccsoen.ewpfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeon.acseccsoen.ftbmjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeon.acseccsoen.hoaaip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeon.acseccsoen.hxfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeon.acseccsoen.iljwpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeon.acseccsoen.iruwsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeon.acseccsoen.kaxvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeon.acseccsoen.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeon.acseccsoen.mqiyai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeon.acseccsoen.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeon.acseccsoen.vdub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeon.acseccsoen.vujbr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeon.acseccsoen.wfhar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeon.acseccsoen.xczohr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeon.acseccsoen.xklygs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeeon.acseccsoen.xxijzm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeoa.acsceseo.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acsceaseno.buylcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acsceaseno.chjjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acsceaseno.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acsceaseno.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acsceaseno.etwhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acsceaseno.ewnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acsceaseno.ewpfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acsceaseno.mmsnc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acsceaseno.nndsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acsceaseno.pfxkfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acsceaseno.pjfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acsceaseno.pjrxnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acsceaseno.qngnfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acsceaseno.qzxmyh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acsceaseno.sdej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acsceaseno.vujbr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acsceaseno.vxkmur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acsceaseno.xczohr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acsceaseno.yaivdx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.aeduen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.blfqub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.bsqus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.cexa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.ctxbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.djbwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.dkjsg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.efupod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.etwhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.ewnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.ewpfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.fhfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.hxfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.jkhrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.mmsnc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.njmxph.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.scagx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.shxvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.ucsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.ukjut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.vdub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.vkjqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.vujbr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.wfhar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.wfpch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.xczohr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.xklygs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.xpref.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.yaivdx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeocon.acseocso.ymklef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.agvve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.aitpjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.blfqub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.buylcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.cexa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.djbwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.dmpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.eddqf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.ewnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.gggdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.gwumv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.hoaaip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.iruwsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.jkhrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.kabpze.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.kaxvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.kfrbvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.mqiyai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.nndsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.pjfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.pjrxnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.sdej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.ucsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.vujbr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.wfhar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.wfpch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.xpref.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.xrmhzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsecso.xzzuxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsescoen.ahidtgh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsescoen.aoweky.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsescoen.bdpdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsescoen.dgjps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsescoen.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsescoen.dmpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsescoen.dnjrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsescoen.ejtgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsescoen.ewpfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsescoen.kabpze.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsescoen.kfrbvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsescoen.mqiyai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsescoen.mspxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsescoen.pjrxnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsescoen.plcdyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsescoen.qngnfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsescoen.ukjut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseeon.acsescoen.xkeqac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.aeduen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.ahidtgh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.aitpjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.bdpdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.bsqus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.cbdunw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.ceemly.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.dhba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.dmpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.dmukt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.eddqf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.ffbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.fhfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.hoaaip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.jkhrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.kaxvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.kfrbvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.lgsksl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.mmsnc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.nndsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.pfxkfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.pjfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.plcdyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.qqvflp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.scagx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.sikqaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.ukjut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.vkjqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.vmazao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.whcyg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.xpref.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.yaivdx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseocon.acseaso.ymklef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.agvve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.bfycgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.bsqus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.buylcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.ctxbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.dgjps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.dmpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.dnjrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.etwhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.ewpfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.ffbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.gggdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.gwumv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.hoaaip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.iljwpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.ilzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.kaxvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.mahdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.mmsnc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.nndsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.pjfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.pvphn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.qqkagj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.qzxmyh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.scagx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.shxvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.sikqaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.tztgfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.ugfse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.vdub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.xklygs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aseon.acseso.xpref.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asesordavivie.davivivi.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200005260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asesoriabarrachina.es"; content:"Host"; http_header; classtype:attempted-recon; sid:200005261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asesorinformatico.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200005262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asf--9u3a.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200005263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asfgjgdbtinternet.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asfhgfddbtint.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ashleymadison.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ashleymadison10.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asignpostale01.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asingpostale08.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asingpostale08.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200005270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asingpostale10.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asistepemex.com.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200005272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aspnetclient-managerhosting.anvvftorino.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aspnetclient-managerhosting.ristorantelariserva.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200005274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asrsolarengenharia.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200005275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"assessoriabradesco.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200005277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"assetbackupledger.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"assetes-walllet.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"assetledgers.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"assets-project-cloud.reconfirmation-zip.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200005281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"assicurazionircauto.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"assigrupermi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"assistanceservicesofusps.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"assistancewithmyusps-delivery.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"assistencia-tecnica-lenovo.net.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200005286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"assistenzacertificaziocarte.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"assistenzasmartwebdati.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"assistenzaverificabper.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"assurancemaladieamelie.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200005290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"assures-malad.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200005291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asthagold.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200005292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"astralsp2enft.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200005293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"astromedia.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200005294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asuntoline-303540535.us-east-1.elb.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aswakleader.app.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200005296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asymvaprib.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"at-103738.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"at-105696.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"at-t-108955magazine.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"at-t-yahoo.sitey.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200005301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"at0.srev.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200005302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"at7389j.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"at8-109644.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atencion-bcienlinea--e983883.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200005305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atendimentocxbrasil.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200005306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atentdcgd.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atgune1231.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"athen-jp.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200005309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"athen-vystarc.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"athen-vystarc.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200005311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atksdqazqb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200005312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atm-i.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atmosdesign.com.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200005314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atnr76dxku336szy.clickfunnels.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atrautoa.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atshop.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200005317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atsuko-inoue.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-100243.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-100294-100054.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-100423.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-100655.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-100727.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-100870.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-100876.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-101095.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-101144.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-101269.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-101459.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-101567-109226.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-101661.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-101749.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-101831.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-102032.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-102271.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-102387.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-102777.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-102892-101980.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-102979.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-103107.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-103176.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-103193.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-103287.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-103381.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-103392.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-103563.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-103571-102954.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-103673.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-103754.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-103795.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-103878.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-103933.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-104157.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-104195.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-104397.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-104401.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-104624.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-104662.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-104763.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-104932.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-105033.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-105043.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-105322.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-105414.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-105475.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-105710.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-105746.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-105890.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-105903.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-105915.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-105924.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-105941.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-106171.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-106210.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-106348.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-106392.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-106707.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-106865.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-107018.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-107041.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-107129.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-107150.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-107205.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-107238.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-10724745.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-107360.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-107861.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-108094.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-108193.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-108244.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-108544.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-108784-108149.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-109196.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-109249.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-109409.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-109434.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-109507.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-10962055.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-109768.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-109835-109085.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-109843-105084.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-109873.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-11.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-16s-exceptional-site.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200005404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-2121212.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-allmalupdae.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-amailaredirect.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-broadband.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-centre1.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-com-email.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200005410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-computer1212.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-desk.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-expired-4de4.att-expiredms1.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200005413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-litte.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-logsmaxiatt.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-mail-102290.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-mail-103005.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-mail-103612.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-mail-106044.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-mail-109990.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-mail-contact.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-mail-invoice.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-mail-login-101900.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-mail-yahoo-update-login.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-mailupdate321.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-management-xyz.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-managementupated.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-newmailupdate.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-securityteam.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-services109354-108985.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-signnow1233.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-team-102901.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-team-103036.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-team-105195.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-ttupfledatema.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-yahoo-109205.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-yahoo-login11ii5.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-yahoo-mail-106797.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-yahoolite2.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att0005ya.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att1.sitey.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200005441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att101.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200005442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att1012456.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att102108.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att2-10407602.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att6676.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att78969.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200005447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attaccountunmask.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attachedfile.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attacker.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attactionrequired.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attboxattboxattboxattbox.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200005452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attcom-108470.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attcommunicationskbhxsjsjkshhskjshkbhhhkckmojnsgdsghd.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attcommunicationskbhxsjsjkshhskjshkbhhhkckmsjnsgdsghd.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attcurrently-107151.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attdomaincupservices.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attdomainhouse5services.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attemailongoinupdates247frmit.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200005459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attfiberonlinedocs-107995.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attgvfvytu.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atthomepage-109143-101956.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attivadati2022.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attletesttupdat.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attlogiinpage.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attloginpage-att.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attloginpage-update-yourmail.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attloginpageloginnow.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attloginpagelogonatt.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attmaiilers.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attmail-currrently.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attmailagreement896564653553454443.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attmailboxupdate.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200005473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attmailinfo.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200005474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attmailingupnowdoc-103554.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attmaillllogggss2122.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attmailonline.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200005477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attmailservice45.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200005478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attmailservicealert.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200005479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attmailsiteupdating.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attmailsupport-100610.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attmal.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attmyemail024.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200005483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attnet-103396.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attnet-108761.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attnet-109362.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attnetmaill-104472-101143.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attnetnvgg66.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attnettwork.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200005489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attnetwork101.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200005490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attonlineresolution.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attonlineservice.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200005492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attonlineverification.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200005493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attpagetoupdate.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attprofile-mailservice5624.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attprofile-mailservice7810.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attsbcxxxxxxx.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attsdomain.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200005498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attserv.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attservicealert.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200005500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attservicemail1.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attsubdomainpdfhtml-107247.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attsupportingmailbox123.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attt-nett.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attt1.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200005505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atttflemiles-109432-108088.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atttnett-109337.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atttpage.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atttportalonlinepdf-104934.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atttse-101281.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atttt12asbs.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attttt-101055.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attttupward3r354.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attupdatemailnow.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attupdatemailservices.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attupdatenowloginpage.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attupdateverification.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200005517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attuppdate2022.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200005518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attvalidupdate5432.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attverificationalert.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200005520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attws-ssl.group.iicxp.lab.cpsess-frontend.sman2cijaku.sch.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200005521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attyahoo-106015.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attyahoo-mail-100612.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attyahoo-mail-105303.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attyahoo0908.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200005525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attyahoomailverification.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200005526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attzcxffclfjlggflggghjjhjljhjjhhk.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atyahhome.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200005528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aeeucaoaomceoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aeeucaoaomceoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aeeucaoaomceoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aeeucaoaomceoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aeeucaoaomceoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aeeucaoaomceoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aeeucaoaomceoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aeeucaoaomceoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aeeucaoaomceoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aeeucaoaomceoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aeeucaoaomceoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aeeucaoaomceoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aeeucaoaomceoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aeeucaoaomceoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aueccaaomceoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aueccaaomceoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aueccaaomceoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aueccaaomceoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aueccaaomceoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aueccaaomceoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aueccaaomceoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aueccaaomceoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aueccaaomceoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aueccaaomceoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aueccaaomceoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aueccaaomceoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aueccaaomceoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aueccaaomceoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aueccaaomceoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aueccaaomceoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aueccaaomceoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aueccaaomceoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aueccaaomceoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aueccaaomceoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aueccaaomceoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aueccaaomceoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aueccaaomceoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aueccaaomceoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaccy.aueccaaomceoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.aeeusaoaomceoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.aeeusaoaomceoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.aeeusaoaomceoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.aeeusaoaomceoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.aeeusaoaomceoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.aeeusaoaomceoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.aeeusaoaomceoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.aeeusaoaomceoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.aeeusaoaomceoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.aeeusaoaomceoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.aeeusaoaomceoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.aeeusaoaomceoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.aeeusaoaomceoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.aeeusaoaomceoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.aeeusaoaomceoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.aeeusaoaomceoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.aeeusaoaomceoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.aeeusaoaomceoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.aeeusaoaomceoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.auecsaaomceoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.auecsaaomceoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.auecsaaomceoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.auecsaaomceoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.auecsaaomceoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.auecsaaomceoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.auecsaaomceoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.auecsaaomceoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.auecsaaomceoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.auecsaaomceoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.auecsaaomceoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.auecsaaomceoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.auecsaaomceoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.auecsaaomceoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacey.auecsaaomceoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aeeucaeaomceoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aeeucaeaomceoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aeeucaeaomceoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aeeucaeaomceoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aeeucaeaomceoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aeeucaeaomceoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aeeucaeaomceoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aeeucaeaomceoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aeeucaeaomceoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aeeucaeaomceoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aeeucaeaomceoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aeeucaeaomceoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aeeucaeaomceoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aeeucaeaomceoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aueccaaomceoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aueccaaomceoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aueccaaomceoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aueccaaomceoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aueccaaomceoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aueccaaomceoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aueccaaomceoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aueccaaomceoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aueccaaomceoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aueccaaomceoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aueccaaomceoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aueccaaomceoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aueccaaomceoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aueccaaomceoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aueccaaomceoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aueccaaomceoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aueccaaomceoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aueccaaomceoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacny.aueccaaomceoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aeeucacaomceoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aeeucacaomceoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aeeucacaomceoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aeeucacaomceoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aeeucacaomceoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aeeucacaomceoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aeeucacaomceoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aeeucacaomceoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aeeucacaomceoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aeeucacaomceoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aeeucacaomceoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aeeucacaomceoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aeeucacaomceoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aeeucacaomceoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aeeucacaomceoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aeeucacaomceoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aeeucacaomceoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aeeucacaomceoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aeeucacaomceoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aeeucacaomceoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aeeucacaomceoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aeeucacaomceoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aeeucacaomceoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aueccaaomceoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aueccaaomceoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aueccaaomceoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aueccaaomceoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aueccaaomceoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aueccaaomceoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aueccaaomceoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aueccaaomceoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aueccaaomceoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aueccaaomceoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aueccaaomceoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aueccaaomceoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aueccaaomceoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aueccaaomceoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aueccaaomceoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aueccaaomceoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aueccaaomceoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aueccaaomceoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aueccaaomceoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aueccaaomceoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacoy.aueccaaomceoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacy.aeucoaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacy.aeucoaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacy.aeucoaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacy.aeucoaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacy.aeucoaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacy.aeucoaom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacy.aeucoaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacy.aeucoaom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacy.aeucoaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacy.auccaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacy.auccaom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paacy.auccaom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaey.aeusoaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaey.aeusoaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaey.aeusoaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaey.aeusoaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaey.aeusoaom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaey.aeusoaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaey.aeusoaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaey.aeusoaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaey.aeusoaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaey.aeusoaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaey.aeusoaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaey.aeusoaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaey.aucsaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaey.aucsaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaey.aucsaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaey.aucsaom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaey.aucsaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paany.aeuceaom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paany.aeuceaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paany.aeuceaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paany.aeuceaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paany.aeuceaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paany.aeuceaom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paany.aeuceaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paany.aeuceaom.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paany.auccaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paany.auccaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paany.auccaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paany.auccaom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paany.auccaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paany.auccaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paany.auccaom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paany.auccaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaoy.aeuccaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaoy.aeuccaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaoy.aeuccaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaoy.aeuccaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaoy.aeuccaom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaoy.aeuccaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaoy.aeuccaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaoy.auccaom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaoy.auccaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaoy.auccaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaoy.auccaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaoy.auccaom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaoy.auccaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaoy.auccaom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaoy.auccaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaoy.auccaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaoy.auccaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaoy.auccaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paaoy.auccaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeauacoaocmeoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aeeseacoaocmeoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacccy.aueseacaomceoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeauasoaocmeoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200005999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aeeseasoaocmeoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccey.aueseasaomceoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeauaceaocmeoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aeeseaceaocmeoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccny.aueseacaomceoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeauaccaocmeoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aeeseaccaocmeoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaemceoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccoy.aueseacaomceoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseacraocmeoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaeraocmeoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeseaoraocmeoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeuoaraomceoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeuoaraomceoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeuoaraomceoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeuoaraomceoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeuoaraomceoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeuoaraomceoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeuoaraomceoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeuoaraomceoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeuoaraomceoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeuoaraomceoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeuoaraomceoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeuoaraomceoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeuoaraomceoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeuoaraomceoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeuoaraomceoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aceeuoaraomceoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeaucoaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aesecoaom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeuecoaaomceoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeuecoaaomceoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeuecoaaomceoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeuecoaaomceoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeuecoaaomceoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeuecoaaomceoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeuecoaaomceoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeuecoaaomceoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeuecoaaomceoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeuecoaaomceoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeuecoaaomceoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeuecoaaomceoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeuecoaaomceoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeuecoaaomceoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeuecoaaomceoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeuecoaaomceoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseacaomceoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseacaomceoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseacaomceoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseacaomceoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseacaomceoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseacaomceoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseacaomceoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseacaomceoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseacaomceoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseacaomceoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseacaomceoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseacaomceoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseacaomceoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseacaomceoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseacaomceoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseacaomceoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseacaomceoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseacaomceoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseacaomceoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseacaomceoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseacaomceoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseacaomceoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseacaomceoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaeaomceoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaeaomceoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaeaomceoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaeaomceoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaeaomceoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaeaomceoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaeaomceoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaeaomceoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaeaomceoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaeaomceoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaeaomceoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaeaomceoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaeaomceoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaeaomceoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaeaomceoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaeaomceoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaeaomceoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaeaomceoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaeaomceoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaeaomceoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaeaomceoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaeaomceoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaeaomceoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaeaomceoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaoaomceoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaoaomceoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaoaomceoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaoaomceoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaoaomceoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaoaomceoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaoaomceoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaoaomceoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaoaomceoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaoaomceoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaoaomceoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaoaomceoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaoaomceoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaoaomceoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaoaomceoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaoaomceoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaoaomceoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaoaomceoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaoaomceoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaoaomceoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.aeueseaoaomceoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paccy.ausecaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aeausoaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200006999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aesesoaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aesesoaom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aesesoaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aesesoaom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aesesoaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aesesoaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aesesoaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aesesoaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aesesoaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aesesoaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aesesoaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aesesoaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aesesoaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aesesoaom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aesesoaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aesesoaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aesesoaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aesesoaom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aesesoaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aesesoaom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aesesoaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aesesoaom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aesesoaom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aesesoaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.aesesoaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacey.ausesaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeauceaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.aeseceaom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacny.ausecaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeauccaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.aeseccaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaem.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacoy.ausecaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.acesecraom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseeraom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceseoraom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceuoraom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceuoraom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceuoraom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceuoraom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceuoraom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aceuoraom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeucoaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeucoaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeucoaom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeucoaom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeucoaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeucoaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeucoaom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeucoaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeucoaom.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeusecaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeusecaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeusecaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeusecaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeusecaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeusecaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeusecaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeusecaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeusecaom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeusecaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeuseeaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeuseeaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeuseeaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeuseeaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeuseeaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeuseeaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeuseeaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeuseeaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeuseeaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeuseeaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeuseeaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeuseeaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeuseeaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeuseoaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeuseoaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeuseoaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeuseoaom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeuseoaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeuseoaom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pacy.aeuseoaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aceeuoaraomceoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aceeuoaraomceoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aceeuoaraomceoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aceeuoaraomceoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aceeuoaraomceoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aceeuoaraomceoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aceeuoaraomceoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aceeuoaraomceoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aceeuoaraomceoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aceeuoaraomceoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aceeuoaraomceoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aceeuoaraomceoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aceeuoaraomceoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aceeuoaraomceoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aceeuoaraomceoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aceeuoaraomceoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aceeuoaraomceoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aeuesoaaomceoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aeuesoaaomceoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aeuesoaaomceoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aeuesoaaomceoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aeuesoaaomceoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aeuesoaaomceoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aeuesoaaomceoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aeuesoaaomceoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aeuesoaaomceoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aeuesoaaomceoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aeuesoaaomceoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aeuesoaaomceoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aeuesoaaomceoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aeuesoaaomceoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aeuesoaaomceoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aeuesoaaomceoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aeuesoaaomceoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aeuesoaaomceoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aeuesoaaomceoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aeuesoaaomceoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aeuesoaaomceoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aeuesoaaomceoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aeuesoaaomceoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paecy.aeuesoaaomceoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paey.aceuoraom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paey.aceuoraom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paey.aceuoraom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paey.aceuoraom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paey.aceuoraom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paey.aceuoraom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paey.aceuoraom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paey.aeusoaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paey.aeusoaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paey.aeusoaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paey.aeusoaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paey.aeusoaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paey.aeusoaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paey.aeusoaom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paey.aeusoaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paey.aeusoaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paey.aeusoaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aceeuearaomceoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aceeuearaomceoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aceeuearaomceoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aceeuearaomceoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aceeuearaomceoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aceeuearaomceoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aceeuearaomceoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aceeuearaomceoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aceeuearaomceoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aceeuearaomceoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aceeuearaomceoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aceeuearaomceoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aceeuearaomceoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aceeuearaomceoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aceeuearaomceoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aceeuearaomceoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aceeuearaomceoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aeueceaaomceoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aeueceaaomceoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aeueceaaomceoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aeueceaaomceoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aeueceaaomceoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aeueceaaomceoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aeueceaaomceoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aeueceaaomceoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aeueceaaomceoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aeueceaaomceoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aeueceaaomceoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aeueceaaomceoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aeueceaaomceoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pancy.aeueceaaomceoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pany.aceueraom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pany.aceueraom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pany.aceueraom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pany.aceueraom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pany.aceueraom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pany.aceueraom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pany.aceueraom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pany.aeuceaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pany.aeuceaom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pany.aeuceaom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pany.aeuceaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pany.aeuceaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pany.aeuceaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pany.aeuceaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pany.aeuceaom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pany.aeuceaom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pany.aeuceaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pany.aeuceaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pany.aeuceaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pany.aeuceaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pany.aeuceaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pany.aeuceaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pany.aeuceaom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pany.aeuceaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aceeucaraomceoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aceeucaraomceoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aceeucaraomceoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aceeucaraomceoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aceeucaraomceoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aceeucaraomceoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aceeucaraomceoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aceeucaraomceoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aceeucaraomceoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aceeucaraomceoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aceeucaraomceoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aceeucaraomceoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aceeucaraomceoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aceeucaraomceoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aceeucaraomceoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aceeucaraomceoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aeueccaaomceoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aeueccaaomceoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aeueccaaomceoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aeueccaaomceoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aeueccaaomceoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aeueccaaomceoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aeueccaaomceoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aeueccaaomceoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aeueccaaomceoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aeueccaaomceoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aeueccaaomceoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aeueccaaomceoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aeueccaaomceoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aeueccaaomceoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aeueccaaomceoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aeueccaaomceoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aeueccaaomceoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aeueccaaomceoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aeueccaaomceoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aeueccaaomceoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paocy.aeueccaaomceoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paoy.aceucraom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paoy.aceucraom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paoy.aceucraom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paoy.aceucraom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paoy.aceucraom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paoy.aceucraom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paoy.aceucraom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paoy.aceucraom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paoy.aceucraom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paoy.aeuccaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paoy.aeuccaom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paoy.aeuccaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paoy.aeuccaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paoy.aeuccaom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paoy.aeuccaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paoy.aeuccaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paoy.aeuccaom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paoy.aeuccaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paoy.aeuccaom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payaccy.accaomaoy.anxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payaccy.accaomaoy.cbvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payaccy.accaomaoy.dpnhyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payaccy.accaomaoy.epmx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payaccy.accaomaoy.mmud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payaccy.accaomaoy.pfar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payaccy.accaomaoy.pnes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payaccy.accaomaoy.qgfdm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payaccy.accaomaoy.tptvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payaccy.accaomaoy.uvwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payaccy.accaomaoy.vfvtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payaccy.accaomaoy.xufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payaccy.aucaaoaeoy.anxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payaccy.aucaaoaeoy.kafx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payaccy.aucaaoaeoy.qimjwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payaccy.aucaaoaeoy.qmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payaccy.aucaaoaeoy.snqhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payaccy.aucaaoaeoy.tvxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payaccy.aucaaoaeoy.wdvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacey.acsaomaoy.anxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacey.acsaomaoy.eenkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacey.acsaomaoy.fwudv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacey.acsaomaoy.jvqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacey.acsaomaoy.lvotdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacey.acsaomaoy.mxacw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacey.acsaomaoy.pagxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacey.acsaomaoy.vfvtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacey.acsaomaoy.wdvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacey.ausaaoaeoy.adxh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacey.ausaaoaeoy.dpnhyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacey.ausaaoaeoy.epmx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacey.ausaaoaeoy.gruc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacey.ausaaoaeoy.uqfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacey.ausaaoaeoy.uvwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacey.ausaaoaeoy.wiymeo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacey.ausaaoaeoy.wwea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacey.ausaaoaeoy.wxwmg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacey.ausaaoaeoy.xufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacny.accaomaoy.cuch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacny.accaomaoy.eenkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacny.accaomaoy.epmx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacny.accaomaoy.mfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacny.accaomaoy.pagxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacny.accaomaoy.pvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacny.accaomaoy.qgfdm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacny.accaomaoy.qkat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacny.accaomaoy.vkvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacny.accaomaoy.wvhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacny.accaomaoy.wxwmg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacny.aucaaoaeoy.dpnhyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacny.aucaaoaeoy.jvqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacny.aucaaoaeoy.mmud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacny.aucaaoaeoy.qmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacny.aucaaoaeoy.tvxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacny.aucaaoaeoy.uvwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacny.aucaaoaeoy.wdvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacny.aucaaoaeoy.xufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacoy.accaomaoy.adxh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacoy.accaomaoy.eenkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacoy.accaomaoy.epmx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacoy.accaomaoy.gruc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacoy.accaomaoy.jvqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacoy.accaomaoy.kvvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacoy.accaomaoy.pvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacoy.accaomaoy.qgfdm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacoy.accaomaoy.qimjwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacoy.accaomaoy.tptvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacoy.accaomaoy.uqfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacoy.accaomaoy.uvwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacoy.accaomaoy.vkvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacoy.accaomaoy.wvhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacoy.accaomaoy.xufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacoy.accaomaoy.yztkng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacoy.aucaaoaeoy.anxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacoy.aucaaoaeoy.cuch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacoy.aucaaoaeoy.dwre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacoy.aucaaoaeoy.fwudv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacoy.aucaaoaeoy.gruc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacoy.aucaaoaeoy.pagxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacoy.aucaaoaeoy.snqhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payacoy.aucaaoaeoy.wdvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aauaoaameoy.adxh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aauaoaameoy.cuch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aauaoaameoy.fwudv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aauaoaameoy.hedn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aauaoaameoy.kvvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aauaoaameoy.mmud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aauaoaameoy.pnes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aauaoaameoy.pvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aauaoaameoy.rvjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aauaoaameoy.tptvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aauaoaameoy.wxwmg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aseaaoaeoy.adxh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aseaaoaeoy.cbvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aseaaoaeoy.eenkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aseaaoaeoy.fwudv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aseaaoaeoy.lvotdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aseaaoaeoy.mmud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aseaaoaeoy.pagxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aseaaoaeoy.pfar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aseaaoaeoy.pvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aseaaoaeoy.uqfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aseaaoaeoy.vkvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aseaaoaeoy.wvhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aseaoaameoy.hedn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aseaoaameoy.kafx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aseaoaameoy.uvwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aseaoaameoy.vkvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-paycccy.aseaoaameoy.xufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccey.aauaoaameoy.anxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccey.aauaoaameoy.fwudv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccey.aauaoaameoy.mfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccey.aauaoaameoy.mxacw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccey.aauaoaameoy.rvjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccey.aauaoaameoy.vfvtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccey.aauaoaameoy.yztkng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccey.aseaaoaeoy.cuch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccey.aseaaoaeoy.epmx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccey.aseaaoaeoy.gruc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccey.aseaaoaeoy.meuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccey.aseaaoaeoy.mfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccey.aseaaoaeoy.pfar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccey.aseaaoaeoy.uqfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccey.aseaaoaeoy.wdvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccey.aseaaoaeoy.wiymeo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccey.aseaaoaeoy.wwea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccey.aseaaoaeoy.wxwmg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccey.aseaaoaeoy.yztkng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccey.aseaoaameoy.epmx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccey.aseaoaameoy.kafx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccey.aseaoaameoy.lvotdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccey.aseaoaameoy.pvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccey.aseaoaameoy.qimjwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccey.aseaoaameoy.xufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aauaeaameoy.adxh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aauaeaameoy.anxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aauaeaameoy.dwre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aauaeaameoy.mfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aauaeaameoy.pfar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aauaeaameoy.pvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aauaeaameoy.qimjwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aauaeaameoy.ujse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aauaeaameoy.vkvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aauaeaameoy.wiymeo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aauaeaameoy.wvhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aseaaoaeoy.epmx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aseaaoaeoy.fwudv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aseaaoaeoy.hedn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aseaaoaeoy.jvqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aseaaoaeoy.kvvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aseaaoaeoy.lvotdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aseaaoaeoy.mfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aseaaoaeoy.mmud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aseaaoaeoy.pnes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aseaaoaeoy.qkat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aseaaoaeoy.tptvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aseaaoaeoy.uvwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aseaaoaeoy.wiymeo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aseaeaameoy.anxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aseaeaameoy.cuch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aseaeaameoy.eenkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aseaeaameoy.hedn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aseaeaameoy.mfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aseaeaameoy.mmud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aseaeaameoy.snqhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aseaeaameoy.ujse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aseaeaameoy.wvhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccny.aseaeaameoy.xufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccoy.aauacaameoy.jvqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccoy.aauacaameoy.tptvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccoy.aauacaameoy.ujse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccoy.aauacaameoy.uqfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccoy.aseaaeaeoy.cbvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccoy.aseaaeaeoy.epmx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccoy.aseaaeaeoy.fwudv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccoy.aseaaeaeoy.uvwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccoy.aseaaeaeoy.vkvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccoy.aseaaeaeoy.wwea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccoy.aseaaoaeoy.fwudv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccoy.aseaaoaeoy.meuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccoy.aseaaoaeoy.rvjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccoy.aseaaoaeoy.wvhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccoy.aseacaameoy.eenkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccoy.aseacaameoy.mmud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccoy.aseacaameoy.qimjwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccoy.aseacaameoy.qmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccoy.aseacaameoy.tvxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccoy.aseacaameoy.uqfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccoy.aseacaameoy.wvhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccoy.aseacaameoy.wwea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.acsearaameoy.cbvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.acsearaameoy.eenkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.acsearaameoy.fwudv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.acsearaameoy.gruc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.acsearaameoy.mfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.acsearaameoy.qimjwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.acsearaameoy.qmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.acsearaameoy.rvjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.acsearaameoy.wdvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.acsearaameoy.wiymeo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.acsearaameoy.yztkng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.acuoaaoaeoy.fwudv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.acuoaaoaeoy.jvqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.acuoaaoaeoy.pfar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.acuoaaoaeoy.pnes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.acuoaaoaeoy.qgfdm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.acuoaaoaeoy.qimjwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.acuoaaoaeoy.uqfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.acuoaaoaeoy.xufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.aeseaaoaeoy.eenkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.aeseaaoaeoy.kafx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.aeseaaoaeoy.qkat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.aeseaaoaeoy.ujse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.aeseaaoaeoy.wiymeo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.aeseaaoaeoy.wvhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.aeseaaoaeoy.xufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payccy.aeseaaoaeoy.yztkng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payecy.acuoaaoaeoy.dpnhyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payecy.acuoaaoaeoy.dwre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payecy.acuoaaoaeoy.mfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payecy.acuoaaoaeoy.mmud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payecy.acuoaaoaeoy.ujse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payecy.acuoaaoaeoy.wdvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payecy.acuoaaoaeoy.wvhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payecy.acuoaaoaeoy.wwea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payecy.acuoaaoaeoy.wxwmg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payncy.acueaaoaeoy.lvotdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payncy.acueaaoaeoy.meuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payncy.acueaaoaeoy.mfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payncy.acueaaoaeoy.pagxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payncy.acueaaoaeoy.qmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payncy.acueaaoaeoy.uqfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payncy.acueaaoaeoy.uvwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payncy.acueaaoaeoy.vkvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payncy.acueaaoaeoy.wxwmg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payncy.aeceaomaoy.dwre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payncy.aeceaomaoy.jvqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payncy.aeceaomaoy.mfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payncy.aeceaomaoy.mmud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payncy.aeceaomaoy.pagxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payncy.aeceaomaoy.snqhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payncy.aeceaomaoy.ujse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payncy.aeceaomaoy.uqfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payncy.aeceaomaoy.vfvtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payncy.aeceaomaoy.xufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payocy.acucaaoaeoy.adxh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payocy.acucaaoaeoy.cbvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payocy.acucaaoaeoy.qmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payocy.acucaaoaeoy.snqhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payocy.acucaaoaeoy.tptvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payocy.acucaaoaeoy.tvxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payocy.acucaaoaeoy.vfvtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-payocy.acucaaoaeoy.yztkng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeucaaaomceoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeucaaaomceoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeucaaaomceoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeucaaaomceoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeucaaaomceoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeucaaaomceoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeucaaaomceoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeucaaaomceoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeucaaaomceoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeucaaaomceoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeucaaaomceoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeucaaaomceoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeucaaaomceoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeucaaaomceoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeucaaaomceoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeucaaaomceoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeucaaaomceoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeucaaaomceoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeucaaaomceoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeucaaaomceoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeusaaaomceoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeusaaaomceoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeusaaaomceoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeusaaaomceoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeusaaaomceoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeusaaaomceoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeusaaaomceoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeusaaaomceoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeusaaaomceoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeusaaaomceoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeusaaaomceoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeusaaaomceoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeusaaaomceoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeusaaaomceoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeusaaaomceoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeusaaaomceoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeusaaaomceoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeusaaaomceoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeusaaaomceoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeusaaaomceoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aeeusaaaomceoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aueccaaomceoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aueccaaomceoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aueccaaomceoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aueccaaomceoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aueccaaomceoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aueccaaomceoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aueccaaomceoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aueccaaomceoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aueccaaomceoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aueccaaomceoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aueccaaomceoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aueccaaomceoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aueccaaomceoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.aueccaaomceoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.auecsaaomceoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.auecsaaomceoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.auecsaaomceoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.auecsaaomceoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.auecsaaomceoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.auecsaaomceoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.auecsaaomceoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.auecsaaomceoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.auecsaaomceoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.auecsaaomceoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.auecsaaomceoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcacny.auecsaaomceoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.aeucaaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.aeucaaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.aeucaaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.aeucaaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.aeucaaom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.aeucaaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.aeusaaom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.aeusaaom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.aeusaaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.aeusaaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.aeusaaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.aeusaaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.aeusaaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.aeusaaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.aeusaaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.aeusaaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.auccaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.auccaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.auccaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.auccaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.auccaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.auccaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.auccaom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.auccaom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.auccaom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.aucsaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.aucsaom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.aucsaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.aucsaom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.aucsaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.aucsaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcany.aucsaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeauasaaocmeoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200007999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseacaaocmeoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aeeseasaaocmeoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseacaomceoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccny.aueseasaomceoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccoy.aueseacaemceoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aceeseaaraocmeoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcccy.aeueseaaaomceoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aeausaaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesecaaom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.aesesaaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausecaom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccny.ausesaom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccoy.ausecaem.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.acesearaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pccy.aeuseaaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aceeuaaraomceoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aceeuaaraomceoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aceeuaaraomceoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aceeuaaraomceoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aceeuaaraomceoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aceeuaaraomceoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aceeuaaraomceoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aceeuaaraomceoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aceeuaaraomceoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aceeuaaraomceoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aceeuaaraomceoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aceeuaaraomceoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aceeuaaraomceoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aceeuaaraomceoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aceeuaaraomceoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aceeuaaraomceoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aceeuaaraomceoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aceeuaaraomceoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aceeuaaraomceoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aceeuaaraomceoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aceeuaaraomceoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuecaaaomceoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuecaaaomceoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuecaaaomceoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuecaaaomceoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuecaaaomceoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuecaaaomceoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuecaaaomceoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuecaaaomceoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuecaaaomceoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuecaaaomceoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuecaaaomceoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuecaaaomceoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuecaaaomceoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuecaaaomceoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuecaaaomceoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuesaaaomceoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuesaaaomceoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuesaaaomceoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuesaaaomceoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuesaaaomceoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuesaaaomceoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuesaaaomceoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuesaaaomceoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuesaaaomceoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuesaaaomceoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuesaaaomceoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuesaaaomceoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuesaaaomceoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuesaaaomceoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuesaaaomceoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuesaaaomceoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuesaaaomceoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuesaaaomceoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuesaaaomceoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcncy.aeuesaaaomceoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aceuaraom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aceuaraom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aceuaraom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aceuaraom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aceuaraom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aceuaraom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aceuaraom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aceuaraom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aceuaraom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aceuaraom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aceuaraom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aceuaraom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aeucaaom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aeucaaom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aeucaaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aeucaaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aeucaaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aeucaaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aeucaaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aeucaaom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aeucaaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aeusaaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aeusaaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aeusaaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aeusaaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aeusaaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aeusaaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aeusaaom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aeusaaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aeusaaom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aeusaaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcny.aeusaaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.accaomaoy.adxh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.accaomaoy.cbvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.accaomaoy.dpnhyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.accaomaoy.eenkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.accaomaoy.kvvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.accaomaoy.lvotdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.accaomaoy.pagxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.accaomaoy.pvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.accaomaoy.wdvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.acsaomaoy.cbvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.acsaomaoy.gruc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.acsaomaoy.mmud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.acsaomaoy.pagxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.acsaomaoy.pfar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.acsaomaoy.pnes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.acsaomaoy.qkat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.acsaomaoy.rvjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.acsaomaoy.tptvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.acsaomaoy.tvxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.acsaomaoy.uvwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.acsaomaoy.wdvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.acsaomaoy.wiymeo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.acsaomaoy.wwea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.acsaomaoy.wxwmg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.acsaomaoy.xufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.aucaaoaeoy.hedn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.aucaaoaeoy.mfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.aucaaoaeoy.mmud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.aucaaoaeoy.tvxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.aucaaoaeoy.ujse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.aucaaoaeoy.wwea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.aucaaoaeoy.xufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.ausaaoaeoy.gruc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.ausaaoaeoy.hedn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.ausaaoaeoy.qkat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.ausaaoaeoy.qmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.ausaaoaeoy.uqfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.ausaaoaeoy.wiymeo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.ausaaoaeoy.xufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyacny.ausaaoaeoy.yztkng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aauaaaameoy.cbvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aauaaaameoy.dpnhyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aauaaaameoy.dwre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aauaaaameoy.gruc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aauaaaameoy.kafx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aauaaaameoy.lvotdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aauaaaameoy.meuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aauaaaameoy.mfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aauaaaameoy.pfar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aauaaaameoy.rvjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aauaaaameoy.uvwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aauaaaameoy.vkvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aauaaaameoy.wiymeo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aauaaaameoy.wxwmg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aauaaaameoy.xufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aauaaaameoy.yztkng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aseaaaameoy.anxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aseaaaameoy.cbvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aseaaaameoy.fwudv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aseaaaameoy.jvqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aseaaaameoy.pvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aseaaaameoy.snqhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aseaaaameoy.wdvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aseaaaameoy.wiymeo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aseaaaameoy.wvhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aseaaaameoy.wxwmg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aseaaaameoy.xufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aseaaaameoy.yztkng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aseaaoaeoy.adxh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aseaaoaeoy.epmx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aseaaoaeoy.pfar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aseaaoaeoy.pnes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aseaaoaeoy.pvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aseaaoaeoy.qgfdm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aseaaoaeoy.qkat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aseaaoaeoy.snqhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aseaaoaeoy.uvwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aseaaoaeoy.wxwmg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccny.aseaaoaeoy.yztkng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccoy.aseaaeaeoy.dwre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccoy.aseaaeaeoy.epmx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccoy.aseaaeaeoy.gruc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccoy.aseaaeaeoy.mmud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccoy.aseaaeaeoy.mxacw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccoy.aseaaeaeoy.tptvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccoy.aseaaeaeoy.ujse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccy.acsearaameoy.eenkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccy.acsearaameoy.hedn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccy.acsearaameoy.kafx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccy.acsearaameoy.mxacw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccy.acsearaameoy.qimjwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccy.acsearaameoy.tvxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyccy.acsearaameoy.ujse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.acuaaaoaeoy.anxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.acuaaaoaeoy.eenkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.acuaaaoaeoy.epmx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.acuaaaoaeoy.hedn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.acuaaaoaeoy.lvotdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.acuaaaoaeoy.mmud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.acuaaaoaeoy.pagxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.acuaaaoaeoy.qmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.acuaaaoaeoy.vkvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.acuaaaoaeoy.wvhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.aecaaomaoy.cbvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.aecaaomaoy.fwudv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.aecaaomaoy.kafx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.aecaaomaoy.qkat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.aecaaomaoy.vkvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.aecaaomaoy.wdvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.aesaaomaoy.eenkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.aesaaomaoy.jvqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.aesaaomaoy.lvotdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.aesaaomaoy.mmud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.aesaaomaoy.pnes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.aesaaomaoy.rvjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.aesaaomaoy.tptvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.aesaaomaoy.vfvtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.aesaaomaoy.wiymeo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pcyncy.aesaaomaoy.xufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeuccaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeuccaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeuccaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeuccaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeuccaom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeuccaom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeuccaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeuccaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeuccaom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeuccaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeuccaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeuceaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeuceaom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeuceaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeuceaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeuceaom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeuceaom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeuceaom.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeuceaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeucoaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeucoaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeucoaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeucoaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeucoaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeucoaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeucoaom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeucoaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeusoaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeusoaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeusoaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeusoaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeusoaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeusoaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeusoaom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeusoaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeusoaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeusoaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeusoaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aeusoaom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.auccaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.auccaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.auccaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.auccaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.auccaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.auccaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.auccaom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.auccaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aucsaom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aucsaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aucsaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aucsaom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aucsaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poaay.aucsaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucacaomceoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucacaomceoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucacaomceoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucacaomceoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucacaomceoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucacaomceoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucacaomceoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucacaomceoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucacaomceoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucacaomceoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucacaomceoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucacaomceoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucacaomceoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucacaomceoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucacaomceoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucacaomceoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucacaomceoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucacaomceoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucacaomceoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucacaomceoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucacaomceoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaeaomceoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200008999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaoaomceoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaoaomceoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaoaomceoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaoaomceoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaoaomceoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaoaomceoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaoaomceoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaoaomceoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaoaomceoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaoaomceoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaoaomceoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaoaomceoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaoaomceoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaoaomceoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaoaomceoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaoaomceoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaoaomceoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaoaomceoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaoaomceoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaoaomceoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaoaomceoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeucaoaomceoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeusaoaomceoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeusaoaomceoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeusaoaomceoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeusaoaomceoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeusaoaomceoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeusaoaomceoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeusaoaomceoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeusaoaomceoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeusaoaomceoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeusaoaomceoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeusaoaomceoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeusaoaomceoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeusaoaomceoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeusaoaomceoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeusaoaomceoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeusaoaomceoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeusaoaomceoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeusaoaomceoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeusaoaomceoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeusaoaomceoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeusaoaomceoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeusaoaomceoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeusaoaomceoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aeeusaoaomceoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aueccaaomceoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aueccaaomceoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aueccaaomceoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aueccaaomceoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aueccaaomceoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aueccaaomceoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aueccaaomceoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aueccaaomceoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aueccaaomceoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aueccaaomceoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aueccaaomceoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aueccaaomceoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aueccaaomceoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aueccaaomceoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aueccaaomceoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aueccaaomceoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aueccaaomceoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aueccaaomceoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aueccaaomceoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.aueccaaomceoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.auecsaaomceoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.auecsaaomceoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.auecsaaomceoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.auecsaaomceoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.auecsaaomceoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.auecsaaomceoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.auecsaaomceoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.auecsaaomceoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.auecsaaomceoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.auecsaaomceoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.auecsaaomceoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.auecsaaomceoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.auecsaaomceoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.auecsaaomceoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.auecsaaomceoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.auecsaaomceoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacay.auecsaaomceoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeucaraomceoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeucaraomceoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeucaraomceoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeucaraomceoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeucaraomceoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeucaraomceoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeucaraomceoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeucaraomceoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeucaraomceoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeucaraomceoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeucaraomceoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeucaraomceoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeucaraomceoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeucaraomceoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeucaraomceoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeucaraomceoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeucaraomceoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeucaraomceoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeucaraomceoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeucaraomceoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuearaomceoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuearaomceoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuearaomceoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuearaomceoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuearaomceoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuearaomceoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuearaomceoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuearaomceoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuearaomceoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuearaomceoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuearaomceoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuearaomceoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuearaomceoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuearaomceoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuearaomceoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuearaomceoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuearaomceoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuearaomceoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuearaomceoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuearaomceoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuearaomceoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuearaomceoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuearaomceoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuearaomceoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuoaraomceoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuoaraomceoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuoaraomceoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuoaraomceoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuoaraomceoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuoaraomceoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuoaraomceoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuoaraomceoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuoaraomceoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuoaraomceoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuoaraomceoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuoaraomceoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuoaraomceoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuoaraomceoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aceeuoaraomceoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueccaaomceoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueccaaomceoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueccaaomceoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueccaaomceoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueccaaomceoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueccaaomceoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueccaaomceoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueccaaomceoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueccaaomceoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueccaaomceoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueccaaomceoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueccaaomceoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueccaaomceoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueccaaomceoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueccaaomceoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueccaaomceoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueccaaomceoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueccaaomceoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueccaaomceoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueccaaomceoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueceaaomceoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueceaaomceoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueceaaomceoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueceaaomceoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueceaaomceoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueceaaomceoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueceaaomceoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueceaaomceoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueceaaomceoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueceaaomceoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueceaaomceoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueceaaomceoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueceaaomceoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeueceaaomceoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuecoaaomceoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuesoaaomceoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuesoaaomceoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuesoaaomceoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuesoaaomceoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuesoaaomceoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuesoaaomceoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuesoaaomceoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuesoaaomceoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuesoaaomceoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuesoaaomceoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuesoaaomceoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuesoaaomceoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuesoaaomceoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuesoaaomceoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuesoaaomceoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuesoaaomceoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuesoaaomceoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuesoaaomceoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuesoaaomceoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuesoaaomceoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuesoaaomceoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuesoaaomceoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poacy.aeuesoaaomceoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceucraom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceucraom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceucraom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceucraom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceucraom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceucraom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceucraom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceucraom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceueraom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceueraom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceueraom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceueraom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceueraom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceueraom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceueraom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceueraom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceueraom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceueraom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceueraom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceueraom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceuoraom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceuoraom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceuoraom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceuoraom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceuoraom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceuoraom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceuoraom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceuoraom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceuoraom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aceuoraom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeuccaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeuccaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeuccaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeuccaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeuccaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeuccaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeuccaom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeuccaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeuccaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeuccaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeuceaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeuceaom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeuceaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeuceaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeuceaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeuceaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeucoaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeucoaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeucoaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeucoaom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeucoaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeucoaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeucoaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeucoaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeusoaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeusoaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeusoaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeusoaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeusoaom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poay.aeusoaom.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauccaom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeauceaom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeaucoaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeausoaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseccaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aeseceaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesecoaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.aesesoaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausecaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocay.ausesaom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaccaocmeoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauaceaocmeoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauacoaocmeoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeauasoaocmeoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaccaocmeoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseaceaocmeoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200009999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseacoaocmeoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aeeseasoaocmeoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseacaomceoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccay.aueseasaomceoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccoy.aueseacaemceoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseacraocmeoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.jfwjev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.vcdolz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaeraocmeoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.aezkgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.boufbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.cufyoh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.gsqzpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.juvnbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.kplwvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.ohdlut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.pafzaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.qeptvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.qvgxtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aceeseaoraocmeoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.awlcqy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.cjjfec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.kprwdg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.mazphk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.mtuapp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.nwbezf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.pmukqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.qptcsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.shfxjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.weyssx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.yhuheg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseacaomceoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.acebmv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.aoxxdp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.auomwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.axnnut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.bcvwpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.bluxbq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.bmzcgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.bpadlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.ctwyvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.ddwvbd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.dqahxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.egakdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.egcbfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.etywhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.ffqqrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.gjaxjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.iqlnii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.islxvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.jhougs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.jutykb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.kenjco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.keyshm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.kjotzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.lezzas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.lgjkee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.lrabyo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.lsepea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.mchedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.mfznlp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.nfrtli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.nrjdwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.nvwszn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.nwgjza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.otuxec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.pfrtkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.punfaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.qhumzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.qriyir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.rmlbzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.rxspaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.tbmswx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.tzqbcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.urbicr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.utndwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.vnlgog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.vswpxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.wfclkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.wsejfh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.wxtxex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.wzyrmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.yunpgg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.yzioih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.zeekfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.zjynwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.zkspkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaeaomceoy.zlxcfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaoaomceoy.bayvlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaoaomceoy.caiknr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaoaomceoy.ctkwoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaoaomceoy.ekijve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaoaomceoy.flfoew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaoaomceoy.glxpxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaoaomceoy.jrvsgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaoaomceoy.lfpioo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaoaomceoy.mgpisy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaoaomceoy.mlufzb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaoaomceoy.pvnoai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaoaomceoy.qoepuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaoaomceoy.qynyjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaoaomceoy.rwmjlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaoaomceoy.tlfkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaoaomceoy.vhypzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaoaomceoy.vrxppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaoaomceoy.xzdxdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poccy.aeueseaoaomceoy.yrwtop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocoy.ausecaem.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocoy.ausecaem.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocoy.ausecaem.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocoy.ausecaem.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocoy.ausecaem.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocoy.ausecaem.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocoy.ausecaem.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocoy.ausecaem.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocoy.ausecaem.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocoy.ausecaem.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocoy.ausecaem.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocoy.ausecaem.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocoy.ausecaem.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocoy.ausecaem.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocoy.ausecaem.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocoy.ausecaem.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocoy.ausecaem.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocoy.ausecaem.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocoy.ausecaem.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocoy.ausecaem.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocoy.ausecaem.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocoy.ausecaem.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocoy.ausecaem.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocoy.ausecaem.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocoy.ausecaem.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.mpxgvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.acesecraom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseeraom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.rbposg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.ybbisq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aceseoraom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.dzhunz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.eeeobp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.fippst.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.frxthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.omtbmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.otwtfq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.tckamt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.tuxisw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.uyvndq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.vhttbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.yvfoys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeusecaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseeaom.adzsfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseeaom.bhijai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseeaom.bxpaxw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseeaom.cbzvio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseeaom.cildah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseeaom.ewqvvs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseeaom.eypfxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseeaom.gkuopc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseeaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseeaom.hazqsp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseeaom.htjusz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseeaom.kmjxox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseeaom.lvjtih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseeaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseeaom.ntltjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseeaom.rmtmfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseeaom.spcouc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseeaom.suszyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseeaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseeaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseeaom.ufvzxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseeaom.wcdvir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseeaom.wnnesf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseeaom.xybvbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseeaom.zqiqby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseoaom.anieqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseoaom.bhrzfm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseoaom.dbcsxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseoaom.gpsckx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseoaom.gqcdxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseoaom.mwjpue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseoaom.qzrupr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseoaom.sjmbhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseoaom.udjddx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseoaom.ufjyvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-pocy.aeuseoaom.vzaiuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.accaomaoy.anxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.accaomaoy.eenkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.accaomaoy.fwudv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.accaomaoy.gruc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.accaomaoy.lvotdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.accaomaoy.mxacw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.accaomaoy.pagxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.accaomaoy.pnes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.accaomaoy.qimjwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.accaomaoy.tptvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.accaomaoy.tvxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.accaomaoy.wdvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.accaomaoy.wiymeo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.accaomaoy.wvhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.acsaomaoy.adxh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.acsaomaoy.cuch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.acsaomaoy.kvvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.acsaomaoy.pfar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.acsaomaoy.qgfdm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.acsaomaoy.qkat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.acsaomaoy.uqfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.acsaomaoy.vfvtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.acsaomaoy.vkvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.acsaomaoy.wxwmg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.aucaaoaeoy.jvqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.aucaaoaeoy.kafx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.aucaaoaeoy.meuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.aucaaoaeoy.mfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.aucaaoaeoy.qimjwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.aucaaoaeoy.vfvtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.aucaaoaeoy.wvhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.ausaaoaeoy.epmx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.ausaaoaeoy.fwudv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.ausaaoaeoy.gruc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.ausaaoaeoy.jvqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.ausaaoaeoy.meuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.ausaaoaeoy.mfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.ausaaoaeoy.pagxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.ausaaoaeoy.pvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.ausaaoaeoy.qgfdm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.ausaaoaeoy.qimjwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.ausaaoaeoy.snqhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.ausaaoaeoy.wwea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacay.ausaaoaeoy.yztkng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.acucaaoaeoy.jvqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.acucaaoaeoy.mxacw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.acucaaoaeoy.qmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.acucaaoaeoy.tptvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.acucaaoaeoy.tvxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.acucaaoaeoy.uqfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.acueaaoaeoy.gruc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.acueaaoaeoy.kvvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.acueaaoaeoy.mfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.acueaaoaeoy.qimjwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.acueaaoaeoy.uqfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.acueaaoaeoy.wwea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.acuoaaoaeoy.adxh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.acuoaaoaeoy.dpnhyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.acuoaaoaeoy.epmx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.acuoaaoaeoy.kafx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.acuoaaoaeoy.meuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.acuoaaoaeoy.pvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.acuoaaoaeoy.qgfdm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.acuoaaoaeoy.tptvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.acuoaaoaeoy.ujse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.acuoaaoaeoy.wdvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.acuoaaoaeoy.wiymeo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.acuoaaoaeoy.wxwmg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aeccaomaoy.adxh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aeccaomaoy.jvqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aeccaomaoy.kvvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aeccaomaoy.ujse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aeccaomaoy.uvwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aeccaomaoy.wdvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aeccaomaoy.wiymeo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aeccaomaoy.wxwmg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aeceaomaoy.fwudv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aeceaomaoy.hedn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aeceaomaoy.meuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aeceaomaoy.mxacw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aeceaomaoy.rvjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aeceaomaoy.tvxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aeceaomaoy.ujse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aeceaomaoy.vkvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aeceaomaoy.xufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aecoaomaoy.cbvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aecoaomaoy.dwre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aecoaomaoy.meuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aecoaomaoy.qgfdm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aecoaomaoy.rvjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aecoaomaoy.uvwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aecoaomaoy.wdvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aecoaomaoy.wvhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aecoaomaoy.wxwmg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aecoaomaoy.yztkng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aesoaomaoy.kafx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aesoaomaoy.qkat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aesoaomaoy.rvjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aesoaomaoy.tptvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aesoaomaoy.uqfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aesoaomaoy.wiymeo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aesoaomaoy.wvhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aesoaomaoy.wwea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aesoaomaoy.wxwmg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyacy.aesoaomaoy.xufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aauacaameoy.dwre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aauacaameoy.eenkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aauacaameoy.hedn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aauacaameoy.ujse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aauacaameoy.vkvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aauaeaameoy.cbvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aauaeaameoy.eenkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aauaeaameoy.kafx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aauaeaameoy.mfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aauaeaameoy.mxacw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aauaeaameoy.qgfdm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aauaeaameoy.qkat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aauaeaameoy.tptvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aauaeaameoy.ujse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aauaeaameoy.wiymeo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aauaeaameoy.wwea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aauaoaameoy.dpnhyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aauaoaameoy.jvqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aauaoaameoy.kafx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aauaoaameoy.lvotdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aauaoaameoy.tptvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aauaoaameoy.vkvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aauaoaameoy.wvhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseaaoaeoy.epmx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseaaoaeoy.hedn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseaaoaeoy.jvqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseaaoaeoy.mmud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseaaoaeoy.qmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseaaoaeoy.wiymeo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseaaoaeoy.wvhq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseacaameoy.gruc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseacaameoy.jvqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseacaameoy.meuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseacaameoy.mmud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseacaameoy.mxacw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseacaameoy.pagxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseacaameoy.pfar.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseacaameoy.rvjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseacaameoy.snqhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200010999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseacaameoy.uqfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseacaameoy.vkvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseacaameoy.wdvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseaeaameoy.kafx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseaeaameoy.meuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseaeaameoy.mfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseaeaameoy.pvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseaeaameoy.qgfdm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseaeaameoy.qmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseaeaameoy.rvjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseaeaameoy.tvxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseaeaameoy.vfvtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseaoaameoy.adxh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseaoaameoy.anxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseaoaameoy.dpnhyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseaoaameoy.gruc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseaoaameoy.kvvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseaoaameoy.mfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccay.aseaoaameoy.wxwmg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccoy.aseaaeaeoy.fwudv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccoy.aseaaeaeoy.jvqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccoy.aseaaeaeoy.lvotdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccoy.aseaaeaeoy.qkat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccoy.aseaaeaeoy.tptvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccoy.aseaaeaeoy.tvxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccoy.aseaaeaeoy.ujse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccoy.aseaaeaeoy.uqfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccoy.aseaaeaeoy.wdvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccoy.aseaaeaeoy.wwea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccy.acsearaameoy.anxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccy.acsearaameoy.cuch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccy.acsearaameoy.dpnhyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccy.acsearaameoy.pnes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccy.acsearaameoy.pvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccy.acsearaameoy.qimjwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccy.acsearaameoy.tvxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccy.acsearaameoy.xufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au-poyccy.acsearaameoy.yztkng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"au20th.adobersserl.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auacessoriosbrazzzz.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"audience-upholstery.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"audkkthvxo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"audreyue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"augusandy.bond"; content:"Host"; http_header; classtype:attempted-recon; sid:200011043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auh-veridian.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auhognzxyp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aui493849934324zim.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aui493849934324zim.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auigam.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aula.ula.edu.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200011049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aulavirtualmibanco.freshdesk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aumensuir.tuyapaycolombia.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aumenta.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200011052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aumentaloya.davivien.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aumento-web.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aumentocupo.tuyap.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aumentocupo20221.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200011056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aumentocupotuya.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200011057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aumentodecupoh.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200011058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aunabsupport.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auoneo-jp.fpzseqz.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200011060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auoneo-jp.ksolqd.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200011061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auoneo-jp.lzhcroq.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200011062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auoneo-jp.tqvjihv.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200011063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auoneo-jp.wrfvta.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200011064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aupay-index.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aupay.co.jp.istudiosg.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aupay.jp.capniigata.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aupay.jp.ty-c.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aupikvhhhq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auqnako.space"; content:"Host"; http_header; classtype:attempted-recon; sid:200011070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auraschoolpmna.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aurawhitelist.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ausps.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200011073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"austinl33.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"australiastretcottage.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"austriainnovation.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aut-jil-f7dd.dmarce.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-alertusps.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-arvest.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-document-shared.datingg-voice.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-firsthorizon.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-florida.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-login-a0wegaftdizq01m4ol7x9976r5guh8zj2qynugjo.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-login-chbn3ui09o73cnml1umrvyk77zkuapcrlu5xxeg8.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-login-dixd8l4w4umrzadx5ruhx8tgix0gml37lmtpxub09gbo7.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-login-hczd80h2ld3lkdndf6619l0rny21oqr6m6unt8scpiv5y.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-login-q5v7bitmwxbzj3yjcgi2v1gvsakvuqrvvjjlvr798czzc.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-login-user.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-login-user.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-production-4a4bc.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-production-4a4bc.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-save-dash-ship-information-eusps.dns05.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-sign-01hj4s1r0qa4joet2ubr560nhq292n5yynhqdvfq1w158.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-sign-0qiv8a03gxwftx8d4944i0basoj0kan1c46n0yaqwctcp.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-sign-1926e72f9ssyq66rod6pp1brcxa21br6n87dr8ks.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-sign-60bszfwurhb6e2spiul9bs8c99rbjzq5aoroi12a.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-sign-aiqoo4z1qacqodq3vv1t79dr9pasn795yzep6k2dk5kke.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-sign-nri1wv4pjkovbrai9k9vf0dbuntcr6506rdi26loo2s53.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-sign-ovy86i2igkp45g6ao6ux7a2y10q4057hf8m9v0lg.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-sign-w2shd0wwd6k9h1bnrc7wgytvbvkmbtcolbymul8ezw3uu.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-sumup.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200011101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-task1-m.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth.secure-bigpond.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth01-m.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth01-m.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth0sharefid0000000200000ff1ce009id31d2bb9c.auth0rizesharedo.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authb-jb.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authconsoledigit.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authconsoledigit.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authdigitalcle.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authdigitalcle.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authdigitale.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authdigitale.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authenbcperulngresos-pe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authentic-kub.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200011115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authenticate-0oxsoxauthe.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authenticate-user-online.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authenticate-user-online.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authentificledigit.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authentificledigit.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authlowaservices.neptune-ecli.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authnavyfederal01.freetcp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authorise-id-apple.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authorise-id-apple.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authorsi-adminas.mefound.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authsecuritecle.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authsecuritecle.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authtioncledigit.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authtioncledigit.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authuxeehmutconjxmailssocl.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"autoconfiglink.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200011131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"autodiscover.ryder-dutton.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200011132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"autohauspodcast.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200011133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"automazur.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"autopistarock.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"autoscurt24.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200011136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"autovalidatechain.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"autumn-sun-4a21.paqesads-scure.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auutegdgdg65.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auutegdgdg65.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auxxxxxxxxx.smb.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200011141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auzngpyzaj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"avdmornifi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"avdsaude.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200011144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aveenbv.eu"; content:"Host"; http_header; classtype:attempted-recon; sid:200011145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aver.quartly.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"averagecloudyfreesoftware.loszz2323.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.fbcsrf.sa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.ntk466j.tokyo"; content:"Host"; http_header; classtype:attempted-recon; sid:200011149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.pknnlio.bar"; content:"Host"; http_header; classtype:attempted-recon; sid:200011150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"avisaboneee.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aviso-itau.kinahost.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200011152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"avizkyyltm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"avlyixanyh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.a59wwgh.tokyo"; content:"Host"; http_header; classtype:attempted-recon; sid:200011155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.zamgwo.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200011156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.cmkqku.sa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.eudyfc0.tokyo"; content:"Host"; http_header; classtype:attempted-recon; sid:200011158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.ohhclj.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200011159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.vsqafmp.bar"; content:"Host"; http_header; classtype:attempted-recon; sid:200011160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.aprjql.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200011161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ijamkm.sa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ppsbcf.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200011163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.hdyn4ul.tokyo"; content:"Host"; http_header; classtype:attempted-recon; sid:200011164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.rn0xdmv.tokyo"; content:"Host"; http_header; classtype:attempted-recon; sid:200011165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"avviso.modulo.jspdelivery.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"avwxqhvivu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"awfulflamboyantscan.bigttemal.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"awibhqywyh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"awirer.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"awry.fineee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aws-awsnoonc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200011172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"awsbridgeliveio.best"; content:"Host"; http_header; classtype:attempted-recon; sid:200011173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"awvpawxssy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"axawqghlxx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"axeielneflnity.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"axgvbnpathcssyayamailerificationhtme44fff5rf55433.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"axia-land.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"axie-infinity.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200011179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"axie-land-page.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"axieinfinily.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"axieinfinitty.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"axieinfinity-bak.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"axieinfinity.simt.ind.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200011184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"axienfinity.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"axiinninfinityp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"axjalnfinjty.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"axlujnflnjty.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"axlulnflnlty.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"axnyiheyvf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"axon.lol"; content:"Host"; http_header; classtype:attempted-recon; sid:200011191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"axseb.valiist.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200011192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ay.hyakunencha.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200011193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aysenurbozdogan.av.tr"; content:"Host"; http_header; classtype:attempted-recon; sid:200011194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ayudacoldapl457for.13254768.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ayurgemayurveda.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"azazyinternational.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"azcmvv.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"azem.org.sa"; content:"Host"; http_header; classtype:attempted-recon; sid:200011199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"azizi-developments.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"azmaktqlpg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"azoi-0oisvnaan.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200011202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"azuki-110716005.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"azuki-mint-connect.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"azuki.com.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"azzlawfirm.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"azzuiojcju.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b-t.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b.185-66-91-236.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b059c86968a6427389952025bcee9886.svc.dynamics.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b06668706.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b1.18-116-43-178.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b1tkcubnet-ww.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200011213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b2bxenz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b2c2ccf4-f829-444d-b887-f7c98934ead8.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b2e016b6-e92a-4d84-9caa-41fdb8c9aa03.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b40ef53e-d7fe-47e2-8b17-fd9f3b79ea7b.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b4e921f0.sso-mailsrvr-4344e5teed.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b569999f-9b76-4484-b9d8-189563840cdd.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b56fb6104447f5e98c4db97696ee.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b56fb6104447f5e98c4db97696ee.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b6517bdb-3263-43d0-81e9-b345ea0b13cb.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b74fba45.vinylfence.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200011223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b8db7358-6f11-4e65-a362-6527e5e1e896.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b97bca39.srvr-cloudmail-srvr6754e5rte.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"babichatmohadwoes-bd9a27.ingress-erytho.ewp.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200011226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"baby-swap.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"babydoge.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200011228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"babzcu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bac--credomaticc.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bac-credomatic--credomatic.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bac049csa423jkklfsdo8ujj45888v.mire.tv"; content:"Host"; http_header; classtype:attempted-recon; sid:200011232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"baccabellabeans.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"backend.b2bxmkgw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"backend.bahif9042.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200011235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"backend.bhiflyk36637.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200011236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"backpack-price.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bacpayee.contactin.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200011238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"baddogs.mlnts.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafkreiaafcvu4nbynbxxnwer2khihgre4htstnqu4lbldgvihphguocyq4.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafkreiadw5vkr3oh5mharbo4dyorqnjespmyp6yzjvi2bftgniqrxvu7hm.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafkreicgr2zzzckpynt2mbzpel3vvuvlzvo56l4753boqkpqbmvmui2lsq.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafkreid2ddlvkscrvicx5cvkyy4lepj2kq5n6ce22lkzg3hs6a74mgybxe.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafkreid4f4ax7k4mlmaqc6gxl256bbohhfgmjitzeiox7r6yvtkj4u7e3q.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafkreidf2stfmocidsyr3rudzyqgc23onc53er6divemmpprbgnow5try4.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafkreidvk7k6iponsyr7o67ys4yjjep3mhjkbpvwq6ze62hnqz465cbcyi.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafkreiems77lmmyz4a3zxacpij6xfttdbta24fjgpimymhmtyw42b3a5cq.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafkreigbhggrfwio4a52ugegxwdk52h223kho3crud3mm2iizq33m6oska.ipfs.nftstorage.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafkreihuj4xdqylivfrgfendvjbm6hd3e7indz4rgrc32xwnu2zy5yicvq.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeia7xeoddrafe7fso67e4pu2p4q5ryolxvpzoofcldxb3f26253tlu.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeib5z4bugvpud5oeiesdap5ppqgabwdelqigxpe6qwpru5nnq2u4uq.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeib7qftc7bgvhkdew2purmpqalnn2knkwefxjdgeuskqd5spht4jym.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeibpx3a7x2bfjuphpryqce6md5swafal2lywajmpnsgdtlj2xxssau.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeibucwomwhuava46rcskf7vp56lb2eekoqbg636t3nkfmizzysgrye.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeic25z3p2if5lkwdfz4ck3aqlf5twkz6sjkh4qyju3yugrnrcspitu.ipfs.dweb.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeicozvh5rdv6jkc32vjc5azxzcjeh6vixccrhmuuxwpawhfhhrpuza.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeicufotlyqmfcyo7nniytii2cohnduoyfenhdt5lnq56ezlybd75iu.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeicyk3cahn44vaxcajh7lpj7fku22y46smm5jjygwbw2gw2armkhh4.ipfs.dweb.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeid3fxryldbeoppklbamgdor2guyi3xh3atdb2kmrfa3j3m4ezjwaa.ipfs.dweb.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeid7nt4et4qkx2kesqhzad5my2e67d5yzbac7eq35ijamffnlyt3a4.ipfs.dweb.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeida33rhrdrttgvi22vzrxk6kqvhzqhk3w4dv254yyschmqsrgty2a.ipfs.cf-ipfs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeidra4vsdq2rjorauodswsbuj3nkwe2rvbpdhn6qhnknd5oeary4c4.ipfs.dweb.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeierrcmawuauk5efrah4q7hxkoo6xrzxgkuyxo22zp72hms4wleqn4.ipfs.dweb.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeieu3pzmmxnmvgf2pu6ijnz62ivj35dvdvpu34ix36urnmdd37vd24.ipfs.dweb.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeifkgqoc4b3kmmklg2vhdopi5jzz3gik26narhilbtfem7hqgyqjim.ipfs.cf-ipfs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeifuj5nalym5xn7biif3jhl3rdcdhnmpfinjmy6uhnllevyuqnbe3u.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeigl3tnkxiia7ydmyhagrfrfjfhqwsbahfibosnl7juqjydpgnsl7q.ipfs.dweb.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeih5r7ld3uqec4xzlpjtbpvpzegazowk7a5ypk7eoinyxc6u7x6wpu.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeihbsians6dkjjymjineag6nknooo2ykbnleqh6s6fx2xnatxe5zsi.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeihdar7rztkscbfw2cac2s6pbhsuexzepl7ee75fsggkw2sjdyzybe.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bahgrwimxm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bahiacubanpizza.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"baigllbyfm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bak-1inch.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bak-aave.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bakertillyjfc-outl00k-folder.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bakertillyjfc-outl00k-folder.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bakeryswap.gold"; content:"Host"; http_header; classtype:attempted-recon; sid:200011278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bakhai.vn"; content:"Host"; http_header; classtype:attempted-recon; sid:200011279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"baknfitzhd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bakry-gala.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bakry-imx.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"balancerfi.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"balarotichapo.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"balderweb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"baleariclifestyle.be"; content:"Host"; http_header; classtype:attempted-recon; sid:200011286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"baliclassictour.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bamlohospu.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"banbifemprsas.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"banblfperu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"banbobiinacionall.herokuapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"banca-electronica1.odoo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancaenlinea--userbgeneral.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancaficohsa.entidadbancaria.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancaficohsa.wwwatencion1.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancaolombiacoweb-1.activar01.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancaporlnternetlnterbarnk.fannysigns.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancavirtual.browserr.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancavirtual00.portalsegura3w.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancavirtual000.portalsegura3w.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancaweb.pichicnhcaweb.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancaweb.pichinchaweb12.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancawebclavedinamica.verificarbanca.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancmarsh.es-seguridad.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"banco-sabadell02.es.swtest.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200011305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"banco-sabadell11.es.swtest.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200011306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"banco-sabadell911.es.swtest.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200011307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"banco-santander002.es.swtest.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200011308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancobiiibancamobil.herokuapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancobogotadc.dsakj42.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancobrou513.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancochilepersonas.bancochileper1.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancodavivienda.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200011313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancodigital.modalmaiss.lukali.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200011314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancodobrasil.ethicspoint.eu"; content:"Host"; http_header; classtype:attempted-recon; sid:200011315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancofalabella.pe.jorgemoyano.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancoficohsa.entidadbanca.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancogaliciahomebanking--galiciaar22.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancogaliciahomebanking.galiciaar22.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancogalicialogin.onlineb3.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancogeneral--mensaj.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancogeneral-inicio.gzonasegura.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancogeneral.mensaj.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancogeneralsomostusvecinos--bancogenera.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolobiaclavedinamica.verificarcuent.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolomba-te-protege.proseco.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolombi1a-actualiz4cion.pag3f0un.go.yj.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200011327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolombia-1.sucursalv.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolombia-virtual.webseg3.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolombia.2883929xx3.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolombia.dinamicclave.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolombia.microsoft13.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolombiaaaprotegercuenta.fdhtj56.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolombiacliente-1.colombiacliente.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolombiacoweb.activar01.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolombiainfosas.ftv10.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolombiaonliweb.verificaar.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolombiapeersonas.fshdft56.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolombiapersonas-1.sucursalcancel.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolombiapersonas-3.sucursalcancel.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolombiapersonas-8.sucursalcancel.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolombiapersonas.cxvhtftr.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolombiapersonas.sucursal11.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolombiapersonas.userr33.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolombiaprotegetucuenta.vcntyt.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolombiaruisedtintedquerylanguageclave.regisdinamik.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolombiasttcomunicado.notificacion23.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolombiateinforma.sucursalcancel.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolombiatransaccionessucursalpersonas.bancapersonasvr.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolomclien.bancolomclien.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolomcliente.colombiacliente.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"banconacional.userfab.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"banconacional040.ultimatefreehost.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200011353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"banconacionalcrfi.josegonzalez92.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancoolombiaseguridad.seguridad66.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancoprovinciaerror022.biptoken.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bandimiliasardegna.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"banesecard-login-co.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bangaknitwear.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"banhjarrro.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"banhnws.36984.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"baniznayio.ngracede.affectionate-bouman.47-87-144-243.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200011362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bank.infodatabofa.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bankarwa.unkhair.ac.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200011364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bankbiinacional.herokuapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"banki0wa.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200011366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bankigcolombia.bancabancolombi.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"banking--online1web.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"banking.nabalert.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bankjuliusbaer.tbs.aon.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bankmilenium.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200011371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bankprovincia.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bannblf.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bannerbank.control-inc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"banpara1.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200011375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"banpara2.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200011376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"banqi.dash.3p.net.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200011377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"banrural-ricoh1656622538.zendesk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bapersard.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bapipeijfx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"baradua.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200011381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"baremantar.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200011382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"barneeae.bond"; content:"Host"; http_header; classtype:attempted-recon; sid:200011383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"barraespaci.webcindario.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"basketbackup.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"basrayatha.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"basssinclarsbbbb32111.bedoya01222111.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bathandfloor.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"batsbaatt.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bavarianhaven1.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bavarianhaven1.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bavmdfpzmw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bawzqyrprq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bayc1-love.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200011394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bayc10-live.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200011395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bayc4-love.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200011396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bayc7-live.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200011397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bayc7-love.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200011398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bayc9-live.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200011399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"baych11-live.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200011400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bayclive.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bazaar.lol"; content:"Host"; http_header; classtype:attempted-recon; sid:200011402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bb637b99-35a8-4351-98d7-323c5206cd1c.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bbarona-dot-pdfsharepoin.wm.r.appspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bbb.helpbell.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200011405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bbexdfvq.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200011406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bbkano.mystoreden.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bbmaconline.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bbnewsupdate311.z12.web.core.windows.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bbpwtwihbm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bbtmvespxk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bbtwgdshoq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bbyym.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bca1ac38-694d-4200-823b-b60c425cf3f2.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bcbvjg.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bcd684d5-b2cf-4080-8083-caf7ae8530c1.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bckambalaj.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bcp-bolivia.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bcp-marketing.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bcscan.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bdescon12empresas.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bdhdashboard.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bdphttxfnd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bdspaygo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bdztl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"be35rg90w-r4jg-w9ejfv-9whr9-fjw-ejf-w9jrg9-9wr.obs.na-mexico-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"be4yji.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"beanz.dropreward.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200011428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"beautiful-rosalind.88-99-84-177.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200011429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bebidasaconline.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200011430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"beborides.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200011431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"beca.ifisweb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bedasanuioa.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200011433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bedcandy242.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bedirectory.com.cdn.cloudflare.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"beependra.com.np"; content:"Host"; http_header; classtype:attempted-recon; sid:200011436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"beer.fugrest.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"beer.loglet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"beer.migrall.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"beer.monitie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"beer.velment.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"beho.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200011442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"behvrckbtt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"beingmelinda.organicmelinda.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"beiur-b8d9c.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"beiur-b8d9c.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bekairos.se"; content:"Host"; http_header; classtype:attempted-recon; sid:200011447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"belamokkeueike.110519ijh.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"belgiumbusinessonline.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bellandtell.ae"; content:"Host"; http_header; classtype:attempted-recon; sid:200011450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"belllllllllllllllll00000000001.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"belllllllllllllllll00000000001.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"belllllllllllllllll00000000003.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"belllllllllllllllll00000000004.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"belllllllllllllllll00000000010.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"belllllllllllllllll00000000011.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"belllllllllllllllll00000000011.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"belllllllllllllllll00000000013.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"belllllllllllllllll00000000015.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"belllllllllllllllll00000000017.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"belllllllllllllllll00000000019.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"belllllllllllllllll00000000023.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"belllllllllllllllll00000000024.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"belllllllllllllllll00000000024.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bellsouthemaillverification.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bellsouthonlineverification28.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bellsouths-site12.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bellsouthverification177.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bellton000010.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bellton000014.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bellton000019.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bellton00002.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bellton000024.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bellton000029.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bellton00003.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bellton00004.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bellton00005.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bellton00007.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bellton00009.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bendigo-update.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"beneficiosdiciembre-alinstante.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"benjaminhallcreative.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"benji.jolly-hopper.185-216-71-9.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200011483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"benshoot.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200011484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"beoryhiqeu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bepath.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"berfuasilama.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200011487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bergeaee.gbtefxryt7-95m32xerr6rv.p.temp-site.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"berguvbwhl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"berryblossoms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"besafurkionasa.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200011491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"besingularity.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bestadealsmalls.club"; content:"Host"; http_header; classtype:attempted-recon; sid:200011493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bestchange.mobi"; content:"Host"; http_header; classtype:attempted-recon; sid:200011494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bestchange.uno"; content:"Host"; http_header; classtype:attempted-recon; sid:200011495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bestchange.xn--nt-bja.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200011496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bestchenge.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200011497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bestchenge.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bestcryptochange24.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bestistanbul.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"beta-exodes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"betacentre.com.mt"; content:"Host"; http_header; classtype:attempted-recon; sid:200011502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"betal.yousee.kundeservice.20-68-137-242.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"betamedia.com.ng"; content:"Host"; http_header; classtype:attempted-recon; sid:200011504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"betasegura-viabcp.movil-sms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"betaundmore.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"betheworldsgreatestbarber.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"better.com.np"; content:"Host"; http_header; classtype:attempted-recon; sid:200011508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"betterglaringbuttonbancolombia.virtualsegurid.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"betterunwittingcharmap.bancollomebia3.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bettinamarks.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bexwebmailupdate.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"beyondcryptofx.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bezoioblocks.best"; content:"Host"; http_header; classtype:attempted-recon; sid:200011514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"beztcyalns.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bfds7p.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bfebbqbvzc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bfepyqccgw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bfkwdqfmoi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bfonjqrceg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bgeneral-inicio1--gzonasegura.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bgeneral-inicio1.gzonasegura.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bgeneral-online--gzonasegura.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bgeneral-onlinepa--gzonasegura.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bgeneral.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bgeqgxxrge.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bgielectrical.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200011527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bgm.aromatale.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bgp6nd.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bgyxgjkprp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bhairavstotra.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bharatasolusindo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bharathi1809.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bharatmediaworks.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bhavin0077.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bhdff.w7euw43.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200011536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bhdrhnkgko.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bhfs6f.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bhgytc.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bhkk1v.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bhuhska--8juj.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bhuhska--8juj.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bi-defi.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bi-enlinea.eu5.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bi-gt.w3spaces.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bi2gtenlin3a.c1.biz"; content:"Host"; http_header; classtype:attempted-recon; sid:200011546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bibankmobilonline.herokuapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bibd60.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"biblia247.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"biblioteca.sicrediprogresso.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200011550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bibotrbtiitd.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bicicentroslezama.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bid-synergyfacilityservices.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bienlineaa.industriall.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bienlineagtx.w3spaces.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bienvenueespace.podia.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bigfootsstudio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bigt.fanclub.rocks"; content:"Host"; http_header; classtype:attempted-recon; sid:200011558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bigtindustrialsx.w3spaces.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"biinacionalbankmobil.herokuapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bijlsdbsg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bike-bitkub.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bill-rebate-gov-uk.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bill-rebate-gov-uk.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bill-rebate-gov.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bill-rebate-gov.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bill-rebate-govuk.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bill-rebate-govuk.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bill-rebate-uk.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bill-rebate-uk.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"billfenwick.fyfima.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"billing-status-check.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"billing-status-check.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"billowing-king-3b55.westernbot.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"billsdbsg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"billspaymenstatement3922.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200011576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"billx232.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bimcelltlyuklemeonline.gq"; content:"Host"; http_header; classtype:attempted-recon; sid:200011578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"binacionalbancamobii.herokuapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"binance-1inch.listviewss.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"binancecs.email"; content:"Host"; http_header; classtype:attempted-recon; sid:200011581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"binanceswaps.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"binanel.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"binarypiano.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"binaryx.quick-mint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bindustrial.fxnet.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bindustrialgtx.w3spaces.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"binomskow.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bintexdao.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"binthishalil.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bio-tech.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"biodegradependenterror.251621.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bioenergiiluleaab.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bionicwebdesign.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bipkeyobservation--banprovincia01.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bipttcirze.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bireyselozelkampanya-basvur-online.kampanya-basvuru-sayfa.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200011597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"birgitkoerner.clickfunnels.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bisentechzone.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bisivenkyv.cfolks.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200011600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bisquevillainousblogware3778992.bienvenidoslxz.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"biswap-network.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"biswap-staking.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"biswaptrade.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitbaink.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitbankglobal.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitcoin-store.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitcoinira-trust.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitcoinira-trust.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitcoiniracontrat.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitcoinsucels.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitfinex-afmoveisplanejados.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitfloat.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitflyer.work"; content:"Host"; http_header; classtype:attempted-recon; sid:200011614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bithunnb.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitikub.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitkub-acess.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitkub-app-gesso.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitkub-app.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitkub-casahoteis.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitkub-coin.gq"; content:"Host"; http_header; classtype:attempted-recon; sid:200011621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitkub-crypto-exchange.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitkub-da.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitkub-dv.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitkub-dw.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitkub-dx.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitkub-lojascacula.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitkub-m.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitkub-papelariacriativa.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitkub-raiz.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitkub-rq.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitkub-up.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitkub-up.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200011633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitkub-up.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200011634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitkub.digitalhub.co.th"; content:"Host"; http_header; classtype:attempted-recon; sid:200011635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitkub.fdxs.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200011636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitkubcoin.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200011637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitly.lc"; content:"Host"; http_header; classtype:attempted-recon; sid:200011638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitmart-trust.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitpiecrypto.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitpieex.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitte.modimyk.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitter-moon-9725.regaccounts1009466.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitter-poetry-5215.westofsdfdsfd.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitter-queen-2945.on.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitter-surf-a18b.tyost.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bittrend.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bituvxtmaf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bivuodktba.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bizmax.com.pk"; content:"Host"; http_header; classtype:attempted-recon; sid:200011650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bizzapp.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200011651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bjmcczxll.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bjmkwuuoov.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bjpmzydgqe.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bjsotin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bjsystems.com.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200011656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bjxmczl.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bk-mufj.life"; content:"Host"; http_header; classtype:attempted-recon; sid:200011658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bk.mufj.jp.bewaji.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bk.mufj.jp.gxrwx.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bk.mufj.jp.shbekm.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bkfridayyamericanas.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bkubweb0-com.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200011663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"black-bahia.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"black-bread-f7fb.wo-i-owillm.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"black-friday-antecipada.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"black-mode-e8ed-office365.claretteemerald6712.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blackfriday-compras.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blackfridaypanelas.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blackfridayspecial2022.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blackmountaintrans.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blamaster.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blascanner.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blenlinea.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blerecovery.22web.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blesssingww.natiss.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blgt07.fast-page.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bling536nd.justimg.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blinkinsk8r8.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blitkub-i0.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200011680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blitmap.get-mint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blizzardlogin-us.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bllingsvrfy.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200011683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bloccooperazionemps.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blocglobal.1bi.ir"; content:"Host"; http_header; classtype:attempted-recon; sid:200011685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blockchain-sync.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blockchain1-wallet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blockchainwebcheck.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blog-foundation.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blog.imoveisagape.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200011690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blog.porta-nuova.ch"; content:"Host"; http_header; classtype:attempted-recon; sid:200011691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blogdoportaleducacao.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200011692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blogtravesia.valefiel.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bloqinfor-ompr.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200011694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bltickku-com.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200011695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bltkub-i0.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200011696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bltkuubhome.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blttkub-io.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200011698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blue-sun-7b53.yuoihghghjjj.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blue-sun-7cad.goub74-q3619.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bluemoonnights.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blueroselb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blur.market"; content:"Host"; http_header; classtype:attempted-recon; sid:200011703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blurapeyachtclub.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blurclaim.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blwfpyrmdl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blzfoqnuhc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blzghtesrcl.mfs.gg"; content:"Host"; http_header; classtype:attempted-recon; sid:200011708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bmayogqlmc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bmegroup.bmegroup.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bmhougjzoq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bmpsmmejpf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bmvrucdzwk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bn-bltkub-comnet.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200011714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bn-bltkubs-comss.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200011715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bn01928712.ultimatefreehost.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200011716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bn293e0dosc0d9dsf90000dfdfer.mire.tv"; content:"Host"; http_header; classtype:attempted-recon; sid:200011717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bnacomar.banconacion.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bnajaqoowqoam910nnawjdqwkqw.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bnbdfs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bnblever.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bnconacional.odoo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bncontacto00982.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200011723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bncrcom.bncronline.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bncre.odoo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bncrficr--bncrcosta1.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bncrficr--costarica1.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bncrficr.bncrcosta1.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bncrficr.bncrcosta2.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bncrficr.bncrcostarica2.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bncrnacional5.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bncrrr.verificati.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bngalicass.odoo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bnnacionane.webcindario.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bnpnote004.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bnpnote004.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bnswor.hwwag.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bnvkklaq.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200011738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"boa-user.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"boa-user.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"boanavynfc.temp.swtest.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200011741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"boatekantokente.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200011742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"boavistaservicoss.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"boc-update.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"boc-update.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bocah-smk-dientod-temen.dnsme.eu.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bochetsar.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bocil-cantik-viral-mediafire.dnsme.eu.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bodytransformationfitness.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"boetebzojt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bogged-finance.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"boiicyjedk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bokepviralcolmek.janda.eu.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bold-flower-99ee.pontufbksd.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"boldd.martobang.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bolehshop.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200011756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"boletodomes.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200011757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bolumorin.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bombcripto-game-cv.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bonolle.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"boomla.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200011761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"boostbyq.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"boredapedvachtalubs.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200011763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"boredapehyachtclub.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200011764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"boredapesyachtclub.rewardlive.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200011765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"boredapeyaachtcclub.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200011766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"boredapeyachhtcclub.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200011767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"boredapeyachtclub.special-mint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"boredgobbleryachtclub.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200011769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"borma.co.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200011770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"borracha-bitkub-com.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bosbosleon.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"botecodomanolo.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bountifulselfreliantstack--reserve464.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"boxcatplanet.on-freemint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"boxdrop.onedrive0001.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bp.13-56-168-64.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bp.185-66-91-236.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bp.31-42-177-226.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bp.91-202-5-67.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bp.it.20-68-138-222.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bp49289sc09a9994838cadic873.mire.tv"; content:"Host"; http_header; classtype:attempted-recon; sid:200011782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bpa2022.bancainternetp.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bper-clienti-area-riservata-device-dispositivo.cfolks.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200011784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bper-login.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bper.176-119-30-84.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bper.185-66-91-105.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bper.31-42-177-226.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bper.45-12-2-252.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bper.45-134-173-123.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bper.epizy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bperareaclientiweb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bperbanca.financialintelligences.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bperbancaclienti.apmcinternational.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bperbancaclienti.ghapan.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bperbancaportale.digitalproddz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bperbancaweb.daddygoldenhome.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bperbancaweb.msichanajustice.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bperbancawebaccesso.orientassets.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bpids.ipb.ac.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200011800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bpl1ml.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bplservicescenter.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bpnote0010.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bpnote0010.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bpportalseguro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bptrtejmsa.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bpymrppsks.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bpyvz.hirare.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200011808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bpzgrmggul.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bq3929.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bqaxjtykub.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bqbroxiwqe.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bqdradbmss.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bquakxiyzf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bqvwedpbxy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"br-shein.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200011816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"br-shein.store"; content:"Host"; http_header; classtype:attempted-recon; sid:200011817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"br352.teste.website"; content:"Host"; http_header; classtype:attempted-recon; sid:200011818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bradescoempresas.bankto.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200011819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bradescoexclusivepublicprime.roxpress.dns.navy"; content:"Host"; http_header; classtype:attempted-recon; sid:200011820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bradescoprime-sac.info.gf"; content:"Host"; http_header; classtype:attempted-recon; sid:200011821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bradescosaudeempresariall.sousanogueira.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200011822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brainwing.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200011823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brandsforlessegypt.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brasilcopy.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200011825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brasreaincu.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brave-hill-048043d10.2.azurestaticapps.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200011827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"breakthroughdevelopment.damnserver.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bredft.start.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200011829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bretts.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200011830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brf-sadia-perdix.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bridal.atshop.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bridgeswp.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brifastperubahan.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bright.ai4z.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200011835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"briketstroj.hr"; content:"Host"; http_header; classtype:attempted-recon; sid:200011836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brimo-indonesia.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brinde-bitkub-com.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brinquedos-bitkub-com.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"british-telecom-home.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200011840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"british-telecommunications-104638.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200011841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"britnmillsuit.buzz"; content:"Host"; http_header; classtype:attempted-recon; sid:200011842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brmeendwue.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"broadbandbbtt.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"broadbandtelecommunication.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brohgsebroysh.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200011846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"broke.bibirpergikedanaubuatan.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"broken-forest-7f7c.westernrollled.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"broken-math-09f0.tp80wcx8.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"broken-rice-20d6.richardmayworm252638.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brokents21.whebs21s.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200011851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bromzanloversscul.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200011852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bronze-statues.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooks--canada.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooks-forrunning.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooks-move.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooks-ooke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooks-runfarther.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooks-xsbdyugd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooks-xsdaodab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooks-xsdauofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooks1914.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooksair.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooksforsports.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooksfun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooksghost13sale.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brookshome.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brookslaufschuhe.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200011868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooksmajor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooksnewmethod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooksnewsports.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooksonlinekaufen.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooksprime.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooksrunningcanada.ca"; content:"Host"; http_header; classtype:attempted-recon; sid:200011874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooksrunningshoesusa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooksrunshoeshopping.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brookssale.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200011877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brookssalemalaysia.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooksshoeau.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooksshoesfactoryoutlets.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooksshoesmalaysiaoutlet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooksshoesoutletonline.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200011882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooksshoess.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooksshoesstore.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200011884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooksshoesuksale.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooksshoeswebsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooksshopsft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brookssko-norge.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brookssneakerssale.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200011889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brookssoft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brookssverige.com.se"; content:"Host"; http_header; classtype:attempted-recon; sid:200011891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brooksus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200011892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"broquealtnomfe.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200011893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brou-secured.gecomchile.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200011894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"broubank.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brroooksssale.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brtyad.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bruceslufthadas0291.clickfunnels.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bruket.east.no"; content:"Host"; http_header; classtype:attempted-recon; sid:200011899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brunomarquesdacunha.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brutsnovacarta.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bs.saudeparaempresa.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200011902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bs2www2.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bscascani.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bscfscan.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bscmscan.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bscsacan.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bscscain.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bscscain.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bscscan-enter.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200011910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bscscan-website.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bscscann.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bscscayn.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bscscoan.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bscsscan.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200011915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bscsscann.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bsctscan.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bsczscan.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bsevmdwift.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bsgoqypctg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bsiteonline01.w3spaces.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bsnshlp.sprtacn.scrthlp.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200011922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bspdxwewxk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bsqcscan.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200011924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bsuhiebabi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bswap-finance.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200011926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bsxvzxwrkm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-100065.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-100328.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-102149.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200011930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-102428.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-103266.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200011932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-103690.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-1044mm9ihgfyty87653tws53366.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200011934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-104695-109153btconnect.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-104854.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200011936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-105324.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200011937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-107931.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200011938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-108750.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-109505btconnect.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-109764.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200011941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-10gdgdgg737bfh.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-1ddgdg72yfbfv.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-2022-ringcentral-inc.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-home-connect108096.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-inc3.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-internet-100433.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-internet-104178.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200011948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-update-107195.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt.my-style.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200011950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt1business.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt5-107854.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btbbqocgmr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btbiunsess.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btbiusnesis.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btbtgvbmgm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200011956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btbuisnes.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btbuisnessi.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btbusbness.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btbusinessbilling.wordpress.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btbusinesscommunication.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btbusinessreadybill.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btbusiniess.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btbusinss.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btbusneiss.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btbusnes.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btbusnessi.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btcmessyhjeikm2837399ejdnnxn-snhn377890j933.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btcommunication.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btconnect-04b0cc.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btconnect-0b8563.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btconnect-101046btconnect.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btconnect-109798.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200011973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btconnect-25ac95.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btconnect-331e9b.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btconnect-3a9d8d.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btconnect-5dfe3d.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btconnect-5e7f8e.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btconnect-7dbddd.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btconnect-7e8132.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btconnect-9016ac.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btconnect-943db6.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btconnect-9e13e2.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btconnect-b86e45.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btconnect-cd2d92.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btconnect-eb091c.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btcsu8ms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btdormain108830-105420.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200011988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btdshghehj.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btfdghhgf.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btibuisnes.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btibuisness.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200011992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btinternet-103529.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200011993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btinternet-104188.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200011994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btinternetsyncupd9.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btinternetzzzz.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btlyrgh.mfs.gg"; content:"Host"; http_header; classtype:attempted-recon; sid:200011997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btm-allinial.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200011998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btmail-105330.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200011999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btopelworks910.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200012000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btriqmgrjf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btrtiotrb.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btrxhbevmk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btskisvetr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btstcbxlhm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bttbilpaymentt93.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200012006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bttbusniess.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200012007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bttelecommunications.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bttpaybillls994.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200012009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btupdateservice1.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btwebmail2022.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200012011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btzfevqeks.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btzopfcszp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"buaizonline.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bubimbaicc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"buhssgwshi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"builderscenter.co.tz"; content:"Host"; http_header; classtype:attempted-recon; sid:200012017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"buildershoa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bukidnonmockpolls.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bullettrainbtn2.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bullettrainbtn4.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bullettrainbtn5.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bulungan.go.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200012023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bund-de.lojaintegrada.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200012024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bupdtsbroadbtsbhalloxmail.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200012025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"buralenergiasolar.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"buronrm.nl"; content:"Host"; http_header; classtype:attempted-recon; sid:200012027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"busanopen.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"buscarapcredii.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"busdverse.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-102406.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200012031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-appeal-meta-1298521.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-appeal-meta-1298521.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-appeal-verify1982112.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-configuration-page.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-fb-review-186892127.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-help-service-56361.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-help-service-56361.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-help-service-8d6e6.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-help-service-8d6e6.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-help-service-b64be.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-help-service-bf8df.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-meta-appeal-120940221.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-meta-appeal-120940221.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-meta-appeal-160978992.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-meta-page-2109098125.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-page-alert-1218979825.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-page-alert-126342-23.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-page-alert-1564-352.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-page-appeal-12-085091.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-page-appeal-12-085091.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-page-appeal-123-5423.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-page-appeal-125-23621.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-page-appeal-16789002.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-page-appeal-16789002.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-page-meta-16892798155.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-team-416516841.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-team-416516841.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business01872961.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business01872961.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business1289768912.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business1289768912.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business1298671982.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business1298671982.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business132876912.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business132876912.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business471085396pageissuesrestricted.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200012067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business6487484.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"businessfreedomspeakingacademy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"businessgoon.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"businessloansoptions.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200012071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"businessownerhelp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"businessrecovery7u19089534pageviolation.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200012073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"butteryrareaddition.jgkjakjwatw.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"butyvansoldskool.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"buxsvxjgzd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"buytoptrends.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bvdrxvmwfe.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bvf5.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bviklpedvv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bvr.h61uwtya.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200012081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bvxds.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bw8zgq.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bwhnxxrukr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bwhriqekyj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bwie-22ab7.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bwie-22ab7.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bwzmt4r78w7sr.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bxcajyquhc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bxebhd.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bxjxmxlgfn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bxmlvnqerh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bxvraftebl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bygtdustrilxz.w3spaces.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"byingwallet.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200012095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"byli.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200012096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bypassperstarmercom.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"byrl.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200012098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bytheorchard.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200012099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"byvqtjqvef.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"byxhcqxmhi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"byycrctyaa.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"byycrctyaa.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bzj908.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bzzzhbvxzi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c-c-academy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c-regnacom.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c-regnacom.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c.curiousmorty.be"; content:"Host"; http_header; classtype:attempted-recon; sid:200012109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c.gibsonwine.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c.loveawaits.be"; content:"Host"; http_header; classtype:attempted-recon; sid:200012111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c.mail.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c024fb66-d6bc-4685-92ea-bc570ec170d2.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c0818db6-b070-4d56-b042-5296863ba7e3.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c1392047.ferozo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c1411946.ferozo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c1471222.ferozo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c1751862.ferozo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c1971619.ferozo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c1christine.tjelmeland2e.cso.gov.tt"; content:"Host"; http_header; classtype:attempted-recon; sid:200012120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c1hcr501.caspio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c2002165.ferozo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c2cconstrutora.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200012123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c2dcw069.caspio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c2hch255.caspio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c3abh425.caspio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c3abl700.caspio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c3abp737.caspio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c43c--c34c.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c43c.c34c.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c46d96e2-2f04-460c-83e2-d672298b9912.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c49efw.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c6ebv708.caspio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c73ef34f-27b1-421b-a9f1-717320c7e57d.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c79mex.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c7ay03.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c832bd61-8acc-4a29-9bd4-3b40d13d98ca.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c8cdcdc1-b189-45ce-87b3-408e06ef8846.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c9d47633-18a8-46eb-8bdc-83d7f4ea8758.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ca-italia.185-254-198-177.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ca-regional-fed39.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ca-regional-fed39.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ca23889.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ca32431.tw1.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ca65t4498313.sitebuilder.name.tools"; content:"Host"; http_header; classtype:attempted-recon; sid:200012145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ca6ab6e2-d934-4e38-a88b-930ca12f0825.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cacfnd.cam"; content:"Host"; http_header; classtype:attempted-recon; sid:200012147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cache.nebula.phx3.secureserver.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200012148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cadzbwacmm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cafe5m.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caheuzaowk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caisse-depargneregional.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caisse-depargneregional.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caissedepargnecionga.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caissedepargnecionga.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caissedepargnesacur.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caissedepargnesacur.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caisseing-be.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caisseing-be.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caisseing-cab8a.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caisseing-cab8a.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caisseing-error.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caisseing-error.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caistestedbs.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200012164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caita-ver.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caitalia-cert.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caitalia-clienti.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caitaver.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caitrionaflynn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caixa.loghub.bhxs.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200012170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caixainfos.cargo.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200012171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caixaregularize.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caixaseguradora.quadientcloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cajaarequipa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cajaarequipa.digital"; content:"Host"; http_header; classtype:attempted-recon; sid:200012175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cajabanrural.negocio.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200012176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cajapiuraenlinea.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cajaspiuraproducto.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cajaspiuravveb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cajasullanape.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cajasullanaperu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cajasullanase.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cajasullanasperu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cakeairdrop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"calgaryren234tlistwca.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"californialaborlaw.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200012186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"calm-lab-e74a.cattaleya76.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"calm-night-de70.noopwassssss.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"calprivybank.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"calstateedu.securevdr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"calstatela.proofkeeping.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"calvaryepiscopalbatavia.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"calvarygalesburg.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"camaracordeiro.rj.gov.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200012194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"camaxtesmails.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"camaxtesmails.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"campaignsreport.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"campingdelacourt.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200012198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"campsbayviews.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"camre.pms.co.tz"; content:"Host"; http_header; classtype:attempted-recon; sid:200012200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"canadavisitisrael.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"canapostservice.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cancel-541946541-binance-com.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cancel-operations.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cancel13488157-binance-com.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cancel209640-binance-com.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cancel2472600-binance-com.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cancel299508-binance-com.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cancel299508-binance-com.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cancel3018185-binance-com.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cancel3722909-binance-com.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cancel4060452-binance-com.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cancel5067595-binance-com.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cancel5067595-binance-com.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cancel613736-binance-com.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cancel66097-binance-com.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cancel66097-binance-com.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cancel6757611-binance-com.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cancel8468936-binance-com.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cancel87488257-binance-com.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cancel8917607-binance-com.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cancel9629161-binance-com.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cancel9631783-binance-com.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cancelsanmy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cancuntoursunlimited.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"candoor.kinex11.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"candymountainfudge.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"canjapiura.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"canjapuira.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cantusportingclub.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200012230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"capitalfrigidpublishing--bcopiecu.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"captcha-signin-amzn25.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caqvmcfhcl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caracasmateriais.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"carajearaih.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200012235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caramello-bolos.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"carbltkccsub-net.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"card-nbvti.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cardanostake.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200012239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cardsverify.ns2.name"; content:"Host"; http_header; classtype:attempted-recon; sid:200012240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"careerbuilder-52038.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"careerbuilder-52038.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"careful-things.surge.sh"; content:"Host"; http_header; classtype:attempted-recon; sid:200012243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"carfinderfred.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cargrcole.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"carimbariabrasilc.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"carimbos-emborrachado.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"carimbos-xalingo.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caringkeenmonitor.whasommbb.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"carlaluiza.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"carlos.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200012251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caroline20000000005.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caroline20000000006.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caroline20000000007.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caroon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200012255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"carpediemxp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"carperme.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"carrefour-bank-clients.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"carrefour-bank-clients.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"carrelagebouvy.be"; content:"Host"; http_header; classtype:attempted-recon; sid:200012260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"carrementfemme.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200012261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"carrinho-produt09811.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"carrinho-sub9786.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"carrorosabreas.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"carta.20-228-188-126.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cas-polygon.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"casachinauta.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"casadoborracheiroxx.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"casanaturalle.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"casaperfection.ma"; content:"Host"; http_header; classtype:attempted-recon; sid:200012270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"casasbahialine.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"casasbprotechprime.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"casasbprpmesdenovcb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"casatonibrazw.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case10002361316.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case10002361316.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case100036443676721.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case100036443676721.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case1000423621661.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case1000423621661.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case10005415641518.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case10005415641518.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case1001056218521564552966.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case1001056218521564552966.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case1001759205260954622041.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case1001759205260954622041.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case1004300386.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case1004300386.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case10044196126928419610.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case10044196126928419610.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case100542102310523.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case100543765456.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case100543765456.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case1005643859565.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case1005643859565.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case100620851020962006.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case10063109636129614620.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case10064209612945129645.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case10065624458904.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case10065624458904.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case1009486532852.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case10095258410510.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case10095258410510.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case1009601563058632012962.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case1009601563058632012962.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case1009601563058632012963.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case1009601563058632012963.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case100962085634120.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case100962085634120.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case10096209610961109602.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case100962129629210841723.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case100962129629210841723.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case1009621986519654153220.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case1009621986519654153220.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case10098410451087101.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case10098410451087101.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case1009841851085.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case1009841851085.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case100985610961296312610.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case100985610961296312610.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case10502036121.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case10502036121.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case984932423.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"case984932423.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"casehelp1000437865789607.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"casehelp1000437865789607.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid.10034568934875790.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid.1005610265198415620.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid.1008492056129620921.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid.1008496109520852612.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid100345879345734895.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid100345879345734895.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid100348579985734985.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid100348579985734985.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid1003489563458979345.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid1003489563458979345.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid10035896345897345.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid10035896345897345.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid100358973500346573.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid100358973500346573.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid10038596734895734859.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid10038596734895734859.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid100481965481019815.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid100481965481019815.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid100523456345345345.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid100523456345345345.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid1005789345734958.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid1005789345734958.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid10058349573485978.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid10058349573485978.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid1005896734985673.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid1005896734985673.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid100589734589347589435.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid100589734589347589435.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid1007859469834578546.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid1007859469834578546.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid100834957345893475.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid100834957345893475.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid100856106551205643.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid100856106551205643.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid1008593748795734565.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid1008593748795734565.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid10089156894156980.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid10089156894156980.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid1008934573489573489.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid1008934573489573489.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid1008956783495835.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid1008956783495835.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid1009140650165015620.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid1009140650165015620.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid100961085158510960.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid100961085158510960.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid4785055283customerservice.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid7891000-appeal-form.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid7891000-appeal-form.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid923874238921.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseid923874238921.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"casemetahelpsupport.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"casemetahelpsupport.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"casinopersonnel.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"casomicrosoftco7.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200012381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"castelvielh.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"casvzlrzbc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cateringfoodanddrinksupplies777.business.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200012384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caterlabor.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"catur.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"catus.cat"; content:"Host"; http_header; classtype:attempted-recon; sid:200012387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"causelesshappiness.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caxita.co.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200012389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caycos.beispielseite-wmka.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200012390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cb-titan.wine"; content:"Host"; http_header; classtype:attempted-recon; sid:200012391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cbcltamwuh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cbd4ff9b-b43e-44db-b460-6a779468fac5.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cbdg.h60euwyt.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200012394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cbhou91px.fiswebdv.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200012395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cboqccdvff.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cbskateshoop.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cbvxcvd-r0jgve-9rhngf-wmnc-mw9mxwc0-9refef.obs.af-south-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cbw813.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cbwhgubqfr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cbwvchdcgg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cc80f5ce-556e-4359-822e-61d4178e4d8d.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cccoinpoo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ccdb30f9-ed71-4518-aceb-ffa41ddb0391.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cchrr-6390e.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ccjrlaw.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ccmwdxfhsn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ccyu-4192f.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ccyu-4192f.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cd-35rgj-0wrjngv-0wnedv-0cwbr-0gnd0-fvnmr0-gfh09-df.obs.sa-brazil-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cd32cc75-975b-421f-a7ed-9a39543fd1f0.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cdecornella.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cdemp.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200012413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cdlnjttvgl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cdn-32965.airbnb-onelogin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cdritgcolecer.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cdzjarrkop.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ce2gwei32.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ce96017.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ce96074.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ceckonlinebperita.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cedom.hdcier.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200012422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cef8vwt7y9h.typeform.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cekogroupsd.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"celebratedtrustypython.arg202.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"celo-wallet.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200012426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"celogain.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"celolottery.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"celoreward.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"celowalet.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200012430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"center-1-bd58cb.ingress-earth.ewp.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200012431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"center.digitalone.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200012432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"centoayudasp-ba94eb.ingress-baronn.ewp.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200012433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"centraforce.health"; content:"Host"; http_header; classtype:attempted-recon; sid:200012434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"centraldigitalonline.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"centrica.comrqzrofxnhwwgrqzrofrofxnhwagx2nfse2nfagx2nfsesewxnhwagxwgrqzg.mustaccio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"centroayudacontrol00.7410225.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"centroz774.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ceromperc.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"certifica-assistenzaportale.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"certificaaccessoapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"certificadosgobmx.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cetsbfvzul.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cexie000.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200012444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cf10938.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cf28378.tw1.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cf63395.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cf76830.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cflaxii.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cfnprecision-dot-sharepointexcel-362410.uk.r.appspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cfogh.inputgiant.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200012451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cfwregf8iew-r0u5jgf-08whe-f0he-0fh-08ehf-08hf.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cg51043.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cg81734.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cgd-digital.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200012455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cgd-directa.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200012456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cgd-directa.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200012457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cgd-particulares.pt"; content:"Host"; http_header; classtype:attempted-recon; sid:200012458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cgwgvqhzkp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cgxgoettwg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ch-328328328832.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ch-483828832.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chaih.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200012463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chailisto.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200012464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chainliisti.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chainnliist.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chainsyncfix.surge.sh"; content:"Host"; http_header; classtype:attempted-recon; sid:200012467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chainwallet.42web.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200012468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chalkerabeat.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"challenge-americanas-git-infinity-scroll-wusley.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"challenge-americanas-git-warn-field-wusley.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"challenge-americanas-git-warn-wusley.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"challengermoode.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chaloupka-jeseniky.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cham1001.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cham1002.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"champsmodels.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chamtsayek.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chancey.byethost31.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"changeable-honored-violin.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200012480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"charlestonelitevolleyball.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"charmgroupweb.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"charmgroupweb.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"charmingsinfulbusinesses.distingindouser.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chase-authentication.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chase-help-support-locked.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chase-onlinehelp.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chaussuresbrooks.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200012488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cheapintentrefactoring--activacionxxx.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"check-acc669.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200012490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"check-status-31f89.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"check-status-31f89.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checkbperritaliapayment.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checker-1041734450.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200012494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checkout.perfectpay.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200012495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checkpoint-perbaikan-akun-fb11.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checksweetmail25.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checksweetmail25.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checksweetmail26.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checksweetmail26.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checksweetmail27.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checksweetmail27.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checksweetmail28.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checksweetmail28.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checksweetmail29.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checksweetmail29.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checksweetmail30.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checksweetmail30.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checksweetmail31.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checksweetmail31.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checksweetmail32.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checksweetmail32.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checksweetmail33.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checksweetmail33.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checksweetmail34.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checksweetmail34.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checksweetmail35.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checksweetmail35.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checksweetmail36.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checksweetmail36.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chefbeverlykim.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chegouesquentadablack.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chenaerfuli.rest"; content:"Host"; http_header; classtype:attempted-recon; sid:200012523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cheppad.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cherrr12.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chexyus.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chiangmai.ca"; content:"Host"; http_header; classtype:attempted-recon; sid:200012527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chicagotrolleyservice.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chikkuthomas.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200012529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chillnmdegqiara7-biw9914407bihooe733eddpr2.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"china-gear.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"china5ewln.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chinmayavidyalayarspuram.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chip-bush-parade.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200012534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chiragrajoria.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200012535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chiwawatraidor.officeline.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chkcaptcha2.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200012537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chois.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200012538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"choplylle.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200012539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chris10000x01.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chris10000x01.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"christensengroupinsurance.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"christopherenlow.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chrisxx000042.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chroiarr-dyneact-sloiks.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chubeifeng.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chuckylab.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chunghwa.postgov.tw-tracknumber.saldanarealty.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"church.iasdsydney.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"churchinfinity.co.za"; content:"Host"; http_header; classtype:attempted-recon; sid:200012550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chutlincrapo.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ci44ijckn4f83iatt.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200012552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ci71775.tw1.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ciaim-metapiex.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ciaim-metapiex.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200012555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ciaimopensea.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cibc-a.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200012557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cibc-a.club"; content:"Host"; http_header; classtype:attempted-recon; sid:200012558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cig-net.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cimeronline.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cimeronline.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cimeronlineiadesistemi.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cintasejatidrink.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cioingecko.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200012564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ciozeijcozczeumi.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ciozeijcozczeumi.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cirious.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cirrilla-stripe-form.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cirrilla-stripe-form.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cisteodpady.cz"; content:"Host"; http_header; classtype:attempted-recon; sid:200012570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"citatkndigitallink.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"citi-b39ca.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"citi-b39ca.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"citionline-aouth86c0.query357.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"citizen-com-55621.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"citizen-com-55621.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"citizenbankofmalaysia.sabahjobfair.com.my"; content:"Host"; http_header; classtype:attempted-recon; sid:200012577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"citizens-0nlinebnkcr4b.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"citizens-0nlinebnkcrv.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"citizesecurity.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"city-of-jazz.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200012581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"citycleaninc.com.cdn.cloudflare.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200012582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ciudadanoseguro.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200012583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cj02582.tw1.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cj25440.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cj47817.tw1.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cj86723.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cjmjociuch.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cjmyrtnpau.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cjnbm.sooneur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200012590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ck72895.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ck89680.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ckinucnuzo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ckjjpfbscv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ckjoaqs.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200012595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cknoopnlo-asnhilrcrcountry3455asqdrallassitesearch45asocctanysa.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ckyfvipmmo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cl7zky.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"claim-1inch.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200012599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"claim-mplx-metaplex.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200012600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"claim.gforce689.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"claim.tax.refund.r3k0u.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200012602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"claimapecoins.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"claimapetoken.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"claimopensea.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"claims-opensea.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200012606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"claims.launchapp.sale"; content:"Host"; http_header; classtype:attempted-recon; sid:200012607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"claimsand.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"claimunilp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"claphad.bond"; content:"Host"; http_header; classtype:attempted-recon; sid:200012610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"claspogrix.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"claudiagonzalezd.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"claus.bz"; content:"Host"; http_header; classtype:attempted-recon; sid:200012613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clavd1namikmpleincrediblewearablesappbancolombia22.sftclavedinamik.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clavedinamicabloqueda.verificarcuent.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clavedinamicinicingnetworkgrupbancolombi4.registroclave2.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clavedinamikrisphealthyprioritysucursalgrupobancolomb1a.segubancolombia.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clblink.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200012618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clear-your-business-email-accounts-space-storage-web-updates.us-east-1.linodeobjects.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cleargalaxy.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200012620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clepper.exchange"; content:"Host"; http_header; classtype:attempted-recon; sid:200012621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clhxqxqwis.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clic-radhe.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"click-habbo-photos-events-2022-july.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"click-id-bb1eae.ingress-bonde.ewp.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200012625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clicklo.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200012626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"client-abonnement-fr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"client-regionale.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"client-regionale.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cliente1-portal.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clientedigitalonline.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clienteespecialsempreamee.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clienteperfil.bradapp.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200012633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clienteprotegidopj.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clienthelp.ns01.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200012635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clients.devtux.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clientsrvicesrequstdelisvryuspppcidyoice02.oznemedya.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clientsrvicesrequstdelisvryuspppcidyywo01.oznemedya.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clientsrvicesrequstdelivryuspxxreview0931.oznemedya.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clientsrvicesrequstdelivryusspsrvww09391.oznemedya.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cliffordchance-attorney.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clinicadelcomputador.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200012642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clivedenjewellers.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200012643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clnbifyjfd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clninshaat.atlantgym.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clockurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clone-7473c.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"closingallhomes.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cloud-based-preview.shared-fileees.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cloud-preview-doc.zip-sneidjer.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cloud-preview-shared.auth-sahidoc.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cloud-project-august.media-love.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cloud-project-folder.files-progress.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cloud-shared-folder.preg-remit.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cloud-storage.files-recruitments.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cloud.onlineapp.rest"; content:"Host"; http_header; classtype:attempted-recon; sid:200012656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cloud.pichwebapb.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cloud102.hostgator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clouddoc-authorize.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clouds-leaf-8dd4.sfxqacze.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cloudyfavorableapplication.paobac27.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cloudypelican.build067.wpsandbox.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clrmtaifbs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clt1432536.bmetrack.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clt1448359.bmetrack.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clt1483090.bmetrack.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cltznss.gq"; content:"Host"; http_header; classtype:attempted-recon; sid:200012667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clubeamigosdopedrosegundo.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200012668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clutchbaseball.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clutteredminorgenericsoftware--547854541.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clxluhbbvi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cm15100.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cm29995.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cm4ong.csb.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cm61329.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cm83989.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cmacjsullana.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cmacpiura.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cmecryptovp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cmuzslpdtz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cn46234.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cn4e-69e69.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cn4e-69e69.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cn6v4b.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cnaikarui.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cnbpyatsgx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cner283829.odoo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cnfrmacn.hprusak.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cnfrmtion51acnrcvrysprt2836324452scrtprblmfbmskrs.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200012689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cnkbzdmqms.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cnmfzsfbrb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cnmolwxeou.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cnqehjjqdq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cny-shopee.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"co19921.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"co97132.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coacvalencia.es"; content:"Host"; http_header; classtype:attempted-recon; sid:200012697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coainabselog.azurewebsites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200012698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cobanoir.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200012699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coc-blog.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"codashopviral.dnsme.eu.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"codepasta.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"codersboot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"codigosdedeclaracionesyautorizacionescgr.webnode.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200012704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coffeecatcafe.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cofrhjhbum.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coherent-boggy-file.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200012707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cohsvcvapa.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coiananbasve-log.azurewebsites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200012709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coiansasabselog.azurewebsites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200012710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coin98n.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coin98n.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinbaeswallet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinbase-ethwallet.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200012714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinbase-ibm.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200012715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinbase-tradepro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinbase.download-update.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinbasecoinone.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200012718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinbasecov.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinbasedefi.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200012720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinbasedex.life"; content:"Host"; http_header; classtype:attempted-recon; sid:200012721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinbasedex.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200012722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinbasefuture.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinbasemines.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinbaseproex.life"; content:"Host"; http_header; classtype:attempted-recon; sid:200012725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinbaseproex.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinbaseproex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200012727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinbasetv.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200012728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinexpress.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coingaecko.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200012730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coingeacko.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200012731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coingeckeo.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200012732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coingeckio.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200012733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coingecko-auth.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200012734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coingecko.com.echomcm.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinkgecko.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200012736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinmarketcapext.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200012737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinmarketscope.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinmarmketcap.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200012739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinnmtarketcap.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200012740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinnmxarketcap.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200012741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinnnpoo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinnspoo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinpayu-adres.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinpoocon.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinreauthenticatesync.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinresolver.solutions"; content:"Host"; http_header; classtype:attempted-recon; sid:200012747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinservicios.com.ar"; content:"Host"; http_header; classtype:attempted-recon; sid:200012748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinsmarketascap.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinsolutions.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinsolutions.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinssolutionrectification.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinzmarketcap.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200012753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"colcentralnew.procesardatos.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cold-boat-ddaa.lovinef1664990.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cold.loseair.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200012756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"colis-bpost-be.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"colis-bpost-be.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"collab-doodles.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"collabs-verifier.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"colobor.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"colombiabankig.bancabancolombi.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"colombofilos.com.ar"; content:"Host"; http_header; classtype:attempted-recon; sid:200012763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"com-c.cz"; content:"Host"; http_header; classtype:attempted-recon; sid:200012764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"comcast.workspace.group.xfinity.lab.melbaelectricalservices.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"comercioinnovacion.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"commbank-secure-online.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"commbank-securityteam.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"commoditytree.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"community.avianarp.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"communitybaptistkenosha.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"competentdigitalbraces--2678512.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"compilaaleert-bper.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"compilazione-bper.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"complementosicop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"completadati-bper.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"completaregistrazionediblocco.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"complete-rustic-wildcat.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200012778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"comprasblue.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"comprascom-ofertas.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"comprind.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200012781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"compte-sfr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"compteameli-cartevitale.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200012783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"computadorcaixa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"computadorfacilbraz.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"comse435twnet.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"comune.mogliano-veneto.tv.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200012787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"con2dapps.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"condescending-aryabhata.94-247-176-16.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200012789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"conf.chuuu.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"confeitariacuriosabrasileira.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200012791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"confident-dijkstra.209-127-178-106.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200012792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"confident-noyce-cafe15.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"config-accessref.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"configmain-ref.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"configurazione-revisioneweb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"confiraasnovidadesblack.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"confirm-apps.yijang-invoice.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"confirm-santshold.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"confirma-caixa-gerenciador-empresas-br.eastus.cloudapp.azure.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"confirma004.liveblog365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"confirmaciondecuenta-c30e.czemarkojo.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.884santarita.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.afternoonmilk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.aidanharold.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.akcayataemlak.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.alexandrevidros.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.altoyapi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.alwayz100.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.elainegoodlad.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.eloadinghealth.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.ewealthadviser.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.getpaiddaily123.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.go100vz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.happynew-year2018.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.imagesbydemi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.ivanawiyono.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.jjzekl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.lumenorientis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.mostrahaneke.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.moto-roller.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.mulberryyoga.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.onionsshortfilm.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.ralstonhills.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.raumpoetry.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.sanfranciscoferrariandmaserati.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.seitensprungaera.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.signsgso.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.sistemkeahlian.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.steelcitylimo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.superpongans.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.the419pmcompany.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.tiptopdpm.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.vladanfilipovic.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.wallpapersboom.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connecct-login.xxtjzmzklsp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connect-dkb.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connect-dkb.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connect-login.h-aroma-flora.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connect-login.margaretreilly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connect-login.pumpituplive.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connect-shibaswap-oa.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connectsecure.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connexion-client-cryptage.abitelesvendues.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connexion-populaire.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connexion-populaire.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connexion-sfr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"connpoo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"conperime.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"conpou.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"conrepea.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200012851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consbiv.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200012852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"conseil-malin.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200012853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consent.clarosgvas.mobicare.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200012854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"considerpublisher.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consoleadigital.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consoleadigital.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consolebdigital.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consolebdigital.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consolebpdigital.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consolebpdigital.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consolecdigital.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consolecdigital.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consolecdigitale.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consolecdigitale.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consolecledigital.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consolecledigital.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consoleclesecurite.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consoleclesecurite.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consoledigitalbp.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consoledigitalbp.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consoledigitalisation.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consoledigitalisation.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"constellationbrandstx.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consultar-fatura-maga.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consultas-personas.asesorempre.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consultas.milbanco.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consultasemprecomvc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consultation-digital.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consultation-digital.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consultationdigital.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consultationdigital.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consulteonline2022.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"consultoralleanzagroup.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200012884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"contabilidaderabello.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200012885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"contact-noreply003-my-cheetah-website-1.cheetah.builderall.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"continentalproducts.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"contrataes.sslblindado.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"contratbp02.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"control-wood-a78a.zgwql974.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"controllismartweb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"controlmybperrweb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"contrucctionsimp.ultimatefreehost.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200012893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"convalidamodulo-bper.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"convalidanumero.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"convalidautenza-bper.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cookedbackkeygenerator-1.opreopaorpeao.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cool-queen-7743.on.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cool-sound-a021.xisavok1422993.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cool-sun-00a2.wessternroade.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cool-unit-8dd6.whybed6896573.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coonpooin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cooopoins.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cooperativellama.build067.wpsandbox.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"copadomundonaamericanas2022.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"copyright-supportcenter8731639.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"core.pdf-asset.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coreumlive.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"corklewmel.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"correctioonnfix.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"correos-bcea5d.ingress-baronn.ewp.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200012911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"correos-es.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"correos-es.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"correos-package.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"correos-package.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"correos.particulares.51-103-217-142.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"correoss36.temp.swtest.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"corruptjovialdecimal.bancoogenrals.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"corsair82.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cos-jdxtnwki7.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200012920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cos-jknmfudt6.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200012921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cos-lcpwpdoq8.gq"; content:"Host"; http_header; classtype:attempted-recon; sid:200012922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cosimo.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200012923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cosperpomi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coss.quest"; content:"Host"; http_header; classtype:attempted-recon; sid:200012925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"costa.soft.pe"; content:"Host"; http_header; classtype:attempted-recon; sid:200012926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"costaricaretireonss.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"costumer-area.countryhotelquerce.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200012928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cotacao.crocobeach.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200012929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coteseuplano.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200012930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cottonwooddentalg.nimbusweb.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200012931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"courses.soulmagick.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200012932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"courtcase.co.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200012933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"courteousforestgreenopposites.2348237hh.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"courvillecompany.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"couyr.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200012936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coveryinting.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cozhfvkb.gq"; content:"Host"; http_header; classtype:attempted-recon; sid:200012938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cozinhaamericas.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cozinhaperfeita.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200012940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cozinhaperfeita2022.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cp-group.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200012942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cp.digitalprocurements.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200012943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cp90141.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cpanel.authenticate0.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cpanel.educomschoolmedia.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cpanel10wh.bkk1.cloud.z.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cpaofredmond.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cpcontacts.arshypermedia.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200012949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cpdsgrufvj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cpgclubs.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200012951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cpisafety.che.buet.ac.bd"; content:"Host"; http_header; classtype:attempted-recon; sid:200012952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cpqkpxmvuc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cptj6008.odns.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200012954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cpzawp.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cpzumnpzxa.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cpzwadwqrl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cq21142.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cq54744.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cqwfafzigm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cqyrexyncn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cr.mufg.co.jp.ofgjkr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cr01004.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cr18-bb1c0e.ingress-erytho.ewp.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200012964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cr48790.tw1.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200012965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cr7airdrop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"craceed-nagano.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"craceed-sendai.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"craigfabrikantphd.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cramizytzx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cranehumidifiers.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"crazy-taxi.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200012972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"crazybluevioletverification.requisitoson.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"crazydefensehroes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"crbzgvugfy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"crc06g.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"crdcvbjksp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200012977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"createmyfjfjfbf.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"credifinanciera.didacsis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"creditagricole-sudrhonealpes.blogspot.ba"; content:"Host"; http_header; classtype:attempted-recon; sid:200012980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"creditagricole-sudrhonealpes.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"creditagricole-sudrhonealpes.blogspot.ro"; content:"Host"; http_header; classtype:attempted-recon; sid:200012982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"creditagricole.firetraininglondon.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"creditagricole.superaprendizajealfa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"creditas-lp.pluggy.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"creditcardprocessingcom.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"creditdunord-session.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"creditdunord-session.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200012988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"creditiperhabbogratissicuro100.blogspot.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200012989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"creditsuisse.bluproducts.com.py"; content:"Host"; http_header; classtype:attempted-recon; sid:200012990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"credittun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200012991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"credofast-deal.elementor.cloud"; content:"Host"; http_header; classtype:attempted-recon; sid:200012992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"credomatic.santafp1.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200012993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"credtsuiseny.iaccesscsny.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"credx24.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"creme-crypto.surge.sh"; content:"Host"; http_header; classtype:attempted-recon; sid:200012996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"crestourage.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cricutcomregister.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200012998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"crimson-dawn-bc08.bizd134.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200012999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"crimson-lake-8869.wastereno.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"crimson-thunder-1799.on.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"critair-commande.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"critair-dispositif.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200013003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"critaireservices.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200013004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"critairservice.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200013005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"critix-new-fax-document-share-to-you.us-east-1.linodeobjects.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"crm-galicia.snet.ar"; content:"Host"; http_header; classtype:attempted-recon; sid:200013007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"crm.uof.ac.ae"; content:"Host"; http_header; classtype:attempted-recon; sid:200013008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"crocus-quixotic-mine.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200013009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cromexa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cronosautorestoration.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"crosschain.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200013012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"crossoverbrazil.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"crosstheages-freemint.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200013014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"crowdsolutions.ch"; content:"Host"; http_header; classtype:attempted-recon; sid:200013015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"crowndivin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"crownsys.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"crqwdsblcw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"crtadporto.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"crushingswelteringprogram.w467ujhgs3.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cryptoassetrecovery.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cryptocar.biz"; content:"Host"; http_header; classtype:attempted-recon; sid:200013022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cryptocarspro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cryptocitizens.mlnts.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cryptoflashcoins.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cryptonvest.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cryptopad-pro.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cryptoplanes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cryptopugsociety.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"crystalyan.bond"; content:"Host"; http_header; classtype:attempted-recon; sid:200013030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cs49805.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cs52710.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cs80618.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cse-syneoshealth.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200013034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"csfbssfuot.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"csgorocks.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"csmoney.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"csnidaccount100045812.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"csnidaccount100045812.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"css-lecture.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cstvc6.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"csuxnayube.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ct44378.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ctdvgvqphx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ctjquyqnbu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ctmredirapp.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ctmredirapp.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ctt-delivery-pt.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ctufqjuexj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ctzn-secure3ab.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200013050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ctzn1b.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ctzsv.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cu09161.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cu17817.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cu40593.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cu72193.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cubbychase5k10k.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cube-me.cam"; content:"Host"; http_header; classtype:attempted-recon; sid:200013058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cuenbaseepruulugnesss.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cuentalnhabittand.ltaucredencnles.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cun.uem.mz"; content:"Host"; http_header; classtype:attempted-recon; sid:200013061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cunamutualconnect.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cureinsomnia.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"curious-alfajores-d2a95a.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"curly-field-bd79.wareareto.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"curly-fog-aa13.breadgold8885649.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currently-101872.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200013067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currently-102170.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200013068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currently-att-mailersettingmailactivetorder.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200013069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currentlyatt.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currentlyattnyahoo22.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200013071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currentlymailtermsatt22.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200013072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currentlyyahooatt2022.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200013073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cursor.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200013074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"curtismscaparrotti03.mfs.gg"; content:"Host"; http_header; classtype:attempted-recon; sid:200013075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"curve-fi-excbange-viveiroentreflores.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"curvegoes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"customer-admi-acces.autoescuela-aguilera.es"; content:"Host"; http_header; classtype:attempted-recon; sid:200013078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"customer-p.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"customer-p.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"customersupportteam.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cuwpfqqdes.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cuybitr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cv10674.tw1.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cv65633.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cv67mn.q78b.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cv8ymg.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cvdg56gf.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200013088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cvertqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cvfgcxtops.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cvjrytsple.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cvxxceode.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cw21297.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cw57479.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cwbca.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cwbrewer.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200013096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cwbwka.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cwbwka.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cwhdlwcdwj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cwykwwpiri.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cx-mooeny.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cx58885.tw1.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cxfjfho.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200013103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cxltquksqs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cxmheok.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200013105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cxn1mf.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cxsxcxtuyachsxcx.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200013107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cy57676.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cy85760.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cyber-tmates.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cyber-zet.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cyberflame-connect.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200013112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cybertokyo-oox.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200013113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cydwbs.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"czaialaw.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"czechamlp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"czervygaud.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"czfxtqbxyp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"czgjcacmyx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"czjurbayrh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"czkanfbdsi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"czugczjwdj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"czvkcsrlmw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"czvon.4fan.cz"; content:"Host"; http_header; classtype:attempted-recon; sid:200013124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"d-1vo.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"d.app01988.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200013126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"d.edgecryptobf.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200013127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"d.jxted.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"d.ledgerxllcwq.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200013129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"d.oftde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"d34c7e4e-d3f6-4e8d-acac-0a7fcd5ba436.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"d3957434-f6f6-4f8c-9cb0-bede2ca3b343.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"d565f--b267b.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"d565f.b267b.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"d5dea6cf-4e48-4ea9-b62a-7c8ba577e5bf.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"d7bbb46d-8c1e-4198-8a3e-a6deb005ea1b.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"d999e7ee-1c3b-488b-8078-32025527c513.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"d9indc.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"daapreconnect.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dabxphqmqz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dacetnroj-gemes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dadaotravel.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dahabateeq.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"daiichi-gakki.co.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200013144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"daily-prize-best.life"; content:"Host"; http_header; classtype:attempted-recon; sid:200013145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dainikjeevan.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"daliberdy-jaabo.builderallwppro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dallenfarmer.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"damagedcrispslash--production01.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"damosmas.somosporti.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"damp-brook-ef1f.wm9t6yeu.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"damp-cell-b538.walkingvibe0036866.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"damp-dawn-51e1.nicholasa.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"damp-f43e.recovery-page-secur.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dangol-v2.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"danismakine.com.tr"; content:"Host"; http_header; classtype:attempted-recon; sid:200013156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"danufox.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"danyal-pipelines.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dao-looksrare.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dapp-brdge.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dapp-brdge.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dapp-fixissues.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dapp.activationaccess.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dapp.busta.gg"; content:"Host"; http_header; classtype:attempted-recon; sid:200013164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dappai.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dappbridgeprotocol.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dappbuilder.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dappchain.nl"; content:"Host"; http_header; classtype:attempted-recon; sid:200013168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dappconfiguration.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dappconnects.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dapps-live.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dapps-multichain.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dapps-verifier.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dappsappplug.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dappsappplug.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dappscon.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200013176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dappsconnection.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200013177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dappsreauthenticator.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dappssynch.win"; content:"Host"; http_header; classtype:attempted-recon; sid:200013179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dappstoken.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dappsupportlive.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dappswalletbridge.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dappswalletreauth.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dappswallets.schlimited.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dappsync.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200013185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dappsyncprotocol.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dappvalidator.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dappwalletprotocol.rf.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200013188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dar.kupabaruak.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dardhajon.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dardhajon.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dark-base-6f49.dotmay820.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"darkorangedamagedvie111.sabeek111.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"darkredunknownstruct.arg202.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"darrenkiz.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"darts-dining-r.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200013196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"darululoomislamabad.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"darwizargali1--galicianoarg.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dasd-504b3.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dasd-504b3.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dasd.providn.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dashboard-profile.files-protectiion.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dashboard-seedify.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dataaccess.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dataeducate.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"datdhthsfk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"date-update-ups.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"date.ludtic.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"date.trixeur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"daten-2022.cz"; content:"Host"; http_header; classtype:attempted-recon; sid:200013210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dati-normativa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dati.20-0-255-48.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"datoqtcnsx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"davekrugman.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200013214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"davi-soport3user.create.go.yj.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200013215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"daviplata.co-to.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200013216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"davipltpersonas1.confirmacioens.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"davivien211.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"davivienda.portalweb1.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"daviviendaclave.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200013220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"daviviendaportalseguroweb.diegosanchez26.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"davivienddaperwps.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200013222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"davivienddaperwps.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"davvivienda.wwwportalseguro.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dawno.ciwumugiasda.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dawq.wlyhxj477.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"daycoval.contrato.srv.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200013227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"daycoval.facildepagar.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200013228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"daytrading-wallet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"daytradingwallets.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dbcnsppbvsa.blob.core.windows.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dbcop.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dbhbfdjkvbhf.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dbhitnqtjx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dbisaw.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dbs-pay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dbs.burtmj.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dbs.digital-login-web.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dbs.help-support-sg.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dbs.web-online-sg.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dbsa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dbspaylsh.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200013242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dbssg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dbswallets.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dc4f40b63f4c-a5cf6e1f26state3dcb22c1de9b60a6b322e.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dcard-beime.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dccoo.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dcfkfvddga.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dcjbjcpzya.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dckyagcjws.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dcsupopof.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dcurectifynow.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dd90001.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ddex.capital"; content:"Host"; http_header; classtype:attempted-recon; sid:200013254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ddgy.club"; content:"Host"; http_header; classtype:attempted-recon; sid:200013255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ddo3a-ryaaa-aaaad-qefda-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ddroid509h.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ddroid509h.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ddrv.broncotime.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200013259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ddwkqafctd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"de-bank.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"de22c9kukppr.clickfunnels.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"de728001-ca06-49b5-a1b3-920892e8e737.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"deaconholland.nl"; content:"Host"; http_header; classtype:attempted-recon; sid:200013264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"deborahholland.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"debteliminationsecrets.sa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"decandia.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200013267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"decentralgames-free.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200013268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"decentralizedplatform.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"decentranodeprotocol.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"decentrskal-games-on.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"decrocheur.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dedeeffefe.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"deep-sin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"default-132423534.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200013275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"defefef6666.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"defensajudicial.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200013277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"defi-events.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"defi-go.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200013279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"defi-ned.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"defi.etcdefi027.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200013281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"defi.walleteth-us.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"defiantbrisk.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200013283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"defifinance.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200013284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"defiklngdoms.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"defilo.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"defiportals.handmadebyzak.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200013287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"defiprotocol-dcd35.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"defiprotocol-dcd35.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"defiprotocolsync.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"defiprotocolsync.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"defivalidation.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"defixpro.website"; content:"Host"; http_header; classtype:attempted-recon; sid:200013293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"degalicia.com.ar"; content:"Host"; http_header; classtype:attempted-recon; sid:200013294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"degeneracynft.llmint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"degenverse.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200013296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dein-portal-kunde.de-main.latitud.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"deintiershop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"deirdrei.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dejongtechniek.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dejpaad.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dekont-odd-80c3.fowef59942688.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"del1ver-inpomt2655.glpel98.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200013303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delbarriovalpo.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200013304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delevery010.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delevery010.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delevery011.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delevery011.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delevery012.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delevery012.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delevery02.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delevery02.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delevery03.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delevery03.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delevery04.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delevery04.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delevery05.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delevery05.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delevery06.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delevery06.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delevery07.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delevery07.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delevery08.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delevery08.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delezhen.mashalezhen.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delhiescort69.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delicate-bush-0904.rcvrypahsajk.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delicate-dawn-reganba.vb2jdb03.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delirious-zinc-slice.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200013329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delivery-dhlmanage.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delivery-dhlmanage.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delivery-dhlswitzerland.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delivery-dhlswitzerland.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delivery-elta.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delivery-status.paiza-user-basic.cloud"; content:"Host"; http_header; classtype:attempted-recon; sid:200013335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delivery.attempt.failure.asherq.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delivery.imaginedbyjess.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"deliverydhl-invoice.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"deliverydhl-invoice.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"demande-ameli.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200013340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"demo.amirkoka.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"demo.bradescocontrol.vertitecnologia.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200013342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"demo.neuanfangen-jetzt.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200013343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"demo2.cloudwp.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"demo3.cloudwp.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"demobbingc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"demondremesere-54369.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dengeturizm.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"denizs5-acikdeniz.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200013349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"densitra1.stromunakuy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dentalclinicsvietnam.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dentallabor-morgenstern.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200013352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dentalnutrition.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200013353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dependentevilarchives.cuidadswe2.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"deploy-preview-266--substrate-website.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"deportesregol.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"derendot.page.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200013357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"derg-109445.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"deric-25ca6.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"deric-25ca6.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"desarrolloturisticopartidordelsol.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"desbloqueatuclavedinamicaaqui.verificaar.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"descargarageofempires.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"descontosblackamericanasnovembro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"desejoourocard.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200013365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"design.casadilusso.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200013366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"designbd.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"designelapas.lapassemarie.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"desk-meta-19059.herokuapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"desplugado.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"detection-center.case1000000043673473411.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"detection-center.caseid1000000777713552124.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"detectioncenter-case100051351.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"detectioncenter-case100051351.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"detectioncenter-case100052351.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"detectioncenter-case100052351.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"detectioncenter-case100055111.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"detectioncenter-case100055111.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"detectioncenter-case1000555111.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"detectioncenter-case1000555111.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"deutcher.easy.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-0845524.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-7778.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-activapassda.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-appqontoweb.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-auth-labanquepostale.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-b1enlineaecwed.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-bancamobilbi.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-bancoitausiemprependientedevos.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-bi-en-lin-ea-gt.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-bi-ho-mer-se-cu-ri-ty.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-bi-ho-se-cu-ri-ty.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-bi-line-up-se-cu-rity.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-bi-line-up-secu-rity.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-bibank.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-bigt564.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-bigtg658.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-binacionalbancaa.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-bli-ne-a-sec-uri-ty-hom-e.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-blnlinea.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-blpersonas2.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-bpbusines.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-bppostalamzer.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-cbpbusiness.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-chchipinwe.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-cmvnv.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-corp-bi-gt-1.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-correo.tempurl.host"; content:"Host"; http_header; classtype:attempted-recon; sid:200013408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-cscglobalservices.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-dellintercooler.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-direccion008.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-enbigtt.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-enlinea07.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-favorgraceacademy.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-gtbig20.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-gtenlineakd.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-heladeriaspico.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-industrilgtw.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-itauconfirmarbancapy.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-itauinformasegura.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-itaupysegur.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-kingbigt.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-labanquepostalewebauthentication.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-lomasfresaelpeaso.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-mbpunbusiness.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-mbpvenron.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-mybanquepostale.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-mybpostale.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-obqbusiness.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-personasgt.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-pncsywebeb.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-ppbbnq.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-proviin.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-qontoauthwin.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-qontobn.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-qontocweb.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-qontomacx.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-qontomapp.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-qontomwp.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-qontomyaccount.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-qontowappma.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-qontowebapps.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-qontowebappsim.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-qontowebappv.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-qontowebq.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-qontowin.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-qontownu.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-qontoxapp.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-redirigir123.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-scbbhlpms.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-seguridadhomeitau-py.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-sistprolemserty.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-sitiobienlineagt.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-sucpichiswscurity.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-sunhabibi.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-suxyech.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-systpichncd.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-validaritau-segura.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-www.orlenpaczka.ce5.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200013459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev.curvonix.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev.czarcoin.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev.dgyos6wnyvkvs.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev.pagseguro.qisar.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200013463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev.veganbaking.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev1.ghunter.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev1467.du9fcg1lw9ff6.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev1603.d3tg7juzcxkeqf.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev2753.d2xvn6nqq3i7sx.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev3234.d2vm31ba3efv16.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev3829.dsbkxlgryi3e.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev4876.dzn7ncyzdhcn3.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev5477.d3p2hisi0cjl2e.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev5673.d38vc8bbt91nfn.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev5924.dxxsgb6hsq3ex.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev6728.d2ht460qovesm.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev7029.dxxsgb6hsq3ex.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev7792.d2ghygju3m0txx.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev7840.d2zo37n4ocih9q.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"devaultmagazine.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"developersserver.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"development.aisecureme.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"development.omefyi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"device-review-uk.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"device-review-uk.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"device-valid-uk.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"device-valid-uk.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"devineair.smkcreations.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dexapptools.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dexfixrestore.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dexwalletscoin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dezinsektor-pro.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"df-a78.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"df69449everifyc96044768307.rf.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200013493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dffs-drsfer-ftreeryt.agilecrm.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dfg-kmn.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dfgcfvkfxdjkf.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dftojc.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dgfh5344ggdf54er.mydopweb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dgfoodsnet.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dgfytjeety.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dgjkjhgfdsadfrers109106.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200013501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dgjlsnblss.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dgrth.h92uwtya.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200013503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dgswalletconnect.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dgthyrdthrds.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200013505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dgu9g3a2kzqx2.cloudfront.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dguplanning.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dgw.soundestlink.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dgws.h56euwyt.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200013509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dgx3po.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dhanushr24.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dheeh.so"; content:"Host"; http_header; classtype:attempted-recon; sid:200013512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dhl-estonia.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dhl-estonia.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dhl-event.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dhl.success-order.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200013516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dhlcvgjobs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dhoolpicks.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dhootimportedmarble.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dhwjsakqtc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"diamondacademy.vn"; content:"Host"; http_header; classtype:attempted-recon; sid:200013521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"diamondgamingil.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"diaryframe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dibsipayi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dicantrelend.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dice-34241.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dice-4bc71.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dice-7c79f.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dice-ff8b2.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dicsm.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dienergia.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200013531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"diepost-be0320.ingress-daribow.ewp.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200013532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"diepost.34-123-237-171.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200013533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dieswiss.temp.swtest.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"differentsoulfulbsddaemon.clk430m.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"digfact-emma-presta-dev.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"digiboxtest.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"digital-acces.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"digitaleconsole.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"digitaleconsole.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"digitalhub.westrock.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"digitalinfocle.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"digitalinfocle.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"digitalmediacalicut.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dijitalacikdenizv2-com.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200013545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dijitalsube-acikdenizv8-com.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200013546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dikkfagffs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"diklat.lpem.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"diligenttrimfeed.fie89ofu4.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dimiloc.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200013550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dimpledmiserlyexponent.liu1ov0.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dimuiloumv.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dimuiloumv.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dinamicasucursalrkbluecoldsystemsanalysisgrupbancolomb1a.claved1namik22.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"diners.co.jp.fudf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dipartimento-restrizione.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"direct.smbc.co.jp.aiaq.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"direct.smbc.co.jp.ipyx.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"direct.smbc.co.jp.vntana.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"direct.smbc.co.jp.wajh.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"direct.smbc.co.jp.xbtds.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"direct.smbc.co.jp.xzhdx.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"directionfacturationlaposte.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"directnewszone.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"direitolcv.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200013565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"direktlogin-dkb.is-certified.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"direttiva-dati-check.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"direttiva-device.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"direx.is-great.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"direzione-dati.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"direzione-id-dati.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"direzionedati.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dirgold.easy.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"diromelosa.aumentostuya1.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"diryrobot.inmint.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"disattiva-dispositivo-bper.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"disattivadispositivo-bper.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"disccord-nifro.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"discord-drops.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200013579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"discordgifts.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"discovering-saing.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"discovering-saing.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"discoveryconsultantsglobal.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"discreaty.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"disensafranquicias.com.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200013585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dishaeye.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dishub.kalbarprov.go.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200013587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"disloyalreliableactivecell--yanuba.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"disponibleahora.assitecac.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dispositivobpercard.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"disrupto.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200013591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"distaghyuauff.aumii.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"distinctivei.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"districtchronicles.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"divine-haze-2415.whybed6896573.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"divine-queen-8fb3.b4ahgnor.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"divino.zxinomoiszer.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"divorcelawyers.co.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200013598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"djbingproductions.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"djc74bcd9b51a2-1ebf-4df7-bc61-d371fe9eccf.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"djvljbw.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200013601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"djwtxrnrkz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"djylghwcvu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dk-postnord.dnsalias.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dk6k0z.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dkb-anmeldung.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dkb-anmeldung.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dkb-kunden.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200013608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dkb-online.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dkb-service.systemhaus.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200013610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dkb.meine-banking.eu"; content:"Host"; http_header; classtype:attempted-recon; sid:200013611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dkb.privatkunden.das.kann.01.159-223-236-187.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dkbappde.wpengine.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dkbnachprufen.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dkksilaban.helpprotections.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dkksitamjuntakk.martulangsore.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dknsgulqsq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dkocsrbsdu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dl.9xu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dl3bel.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dlgafbdffx637a61fc58b93.kesarin.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dlnwvfejqk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dloodles.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dlozihnlkq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dlract.snnbc.c0.jp.czdsa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dlrect.snnbc.co.jp.lxysc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dlrect.snnbc.co.jp.shisx.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dlroezdxfc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dlscord-tm.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dm2.opq.pa-tarutung.go.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200013630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dmarket.jp.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dmcekatzsu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dmdecors.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dmyvqrovxw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dnbauth4.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dncdlnc.bancocomunicate.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dns3.qeei.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dns8.qeei.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dnsserviceexpressdelivery.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"do-any-3.strangled.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"doanmnmmmmbnmdffd.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"doc-postale.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"doc-postale.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"doc001.onedrive0001.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"doc345469fx569m-1310252903.cos.na-siliconvalley.myqcloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"doccusend.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"docdrive01060authorizesharingfile.onmicrosoft365.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"doch.payment.support.case.amiamz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dockweilerconsulting.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"doclab-console-auth.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"doclab-console-auth.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"docs-dew-6406.retupamyte.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"docs-frog-ad22.yilurqr6.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"docs-sound-6644.ww0gf02i.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"docs.revv.so"; content:"Host"; http_header; classtype:attempted-recon; sid:200013655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"docsharex-authorize.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"docsharex-authorize.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"docsign.dt70zh6gyjbm7.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"docsreceived.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"docu-review.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"document-cloud-secure.piltrimuging.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"document-clouds.fuconbaetu.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"document-download-902123.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"document-download-902123.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"document-private.direct-sustutelue.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"document-product.rototetiined.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"document-progress-asset.retupamyte.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"document-project-june.voicee-love.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"document-project.secure-count.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"document-projects.files-auuth.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"document-update-progress.shared-filees.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"document.lates-proposale.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"document.payrol.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"document.storages-clouds.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"document11d.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"document12e.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"document4b-8063c.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"document4b-8063c.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"document4c-aabc6.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"document4c-aabc6.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"document5e-22051.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"document5e-22051.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"document9.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"documentation004-service012.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"documentation004-service012.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"documentoprotetto.filedicondivisione-909524fb9aa348b230295a2b7a842c21.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"documents.projects-june.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"documents.shared-authentiicated.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"documents.uvzcknthvfffqjzakuxgdrnthu.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"docuproposalromafirefirstaid.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"docuserve.w3spaces.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"docusign.mslive.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"docusigningcomplete.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"docusignredtail.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dodnxipazm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"doecusgn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dofus-touch-com.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200013697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"doge-club.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200013698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dolllyukoi.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dolunaytravel.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domainatitt.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domaincontroller.pmeimg.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200013702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg1.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg1.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg10.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg10.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg12.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg12.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg15.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg15.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg16.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg16.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg17.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg17.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg19.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg19.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg2.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg2.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg20.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg20.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg21.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg21.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg22.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg22.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg23.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg23.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg24.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg24.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg25.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg25.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg27.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg27.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg28.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg28.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg29.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg29.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg3.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg3.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg30.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg30.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg31.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg31.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg32.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg32.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg33.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg33.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg34.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg34.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg35.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg35.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg4.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg4.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg6.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg6.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg7.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg7.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg8.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domappcheckomeg8.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"domesmarketing.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"done2.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"donnerbe-06.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"doodies.bar"; content:"Host"; http_header; classtype:attempted-recon; sid:200013762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"doodles.free-drop.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200013763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"doodles.freemint-webs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"doodles.tops-mint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"doodlin.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200013766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dooplicators.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"doorsmanufacturer.sa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dorotehoyle.bond"; content:"Host"; http_header; classtype:attempted-recon; sid:200013769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dostawa03984.lol"; content:"Host"; http_header; classtype:attempted-recon; sid:200013770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dostawa29357.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200013771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"doublepowerlessfossil--pbch21233.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"doublequotes.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200013773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"doubles.sellpass.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"douglaspress.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200013775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dowaba-s2dhl.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dowil09.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"doxxx.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dp-pro.co.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200013779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dpcpl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dpd.7214512584.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200013781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dpd.delivery-finish.cfd"; content:"Host"; http_header; classtype:attempted-recon; sid:200013782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dpd.fastpayer.cfd"; content:"Host"; http_header; classtype:attempted-recon; sid:200013783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dpd.myparcels.incoming.20-0-231-140.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dpd.paketversand.20-0-217-175.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dpd.survalyzer.swiss"; content:"Host"; http_header; classtype:attempted-recon; sid:200013786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dpd.track-orders.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200013787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dpdxnrulbf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dpfko-inv.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dpmasdaskj.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dpmtfrczvw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dpn608.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dppbridge.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dqlzwjdgsl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dqtxowr2.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200013795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dqvx1d.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dr-spd.wsixmedia.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dragarwaldentalclinic.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dragonyogi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dramalifefilms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"draqde.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200013801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"drbazzpinx.topijerami.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dream1now.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dreamherbs.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200013804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dremondremese-c1961.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dremondremese-c1961.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"drhenriquesanches.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200013807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"driaord-scriy-hyauently.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"drittohub.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"drive-file-device-local-disk.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"drive-file-device-local-disk.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"drive.dataexpertservices.hu"; content:"Host"; http_header; classtype:attempted-recon; sid:200013812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"drive.secured-login.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"drleokeegan.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"droits.typeform.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dronetenders.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"droopygrownmatrix889363.bienvenidokxm.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"droprtfkt.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"drover.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dry-dawn-acf5.jgomez2482804.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dsfdfss.s3.us-west-004.backblazeb2.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dsgbcipitb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dsgcbeonline.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dsk232.ey77erdf.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dskuk.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dsnppdsobg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dswv54.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dtb5ns.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dtjelgeedx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dtnbroadband.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200013830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"duahatii.topijerami.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dumhandibiryani.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dunescapital.ae"; content:"Host"; http_header; classtype:attempted-recon; sid:200013833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"duniaastronomi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"duvqpvjfxa.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"duvwqormul.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dv9um1.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dvc-b3x6867lv-pencraigvintage.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dvcosglsnb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dvdxrsbyqa.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dwaska.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dwfgqzvdyt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dwgnfwwdja.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dwmp2fw.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200013844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dwtvlheppe.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dwvuc.sooneur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dwydlghpcj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dxcdobxvuo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dxdxdxe.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dxglyvxone.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dxisdfkmkm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dxizmjiicu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dxphulsxxw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dxrzdfjhzi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dxxmmyy.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dxxmmyy.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dyaingenieria-proyectos.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dydcrpfkrb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dyhyvdklcb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dymddexpqa.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dynamic365.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200013861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dynastyclinic.ae"; content:"Host"; http_header; classtype:attempted-recon; sid:200013862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dyno.ink"; content:"Host"; http_header; classtype:attempted-recon; sid:200013863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dyuvstyfawecteraw.blogspot.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200013864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dzfywtzhxs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dzgonacnhp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dzppwlggpg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dzwgievria.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"e-cassare.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"e-davki-refund.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"e-davki-refund.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"e-secretary.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"e-sport.bti-if.dk"; content:"Host"; http_header; classtype:attempted-recon; sid:200013873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"e-surat.kominfo.tabalongkab.go.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200013874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"e-tiempoparcial9.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"e17d8c5f.vinylfence.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200013876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"e1fbar.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"e351d7de-01e5-4513-9832-be968837cee1.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"e362zp.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"e4ra.byethost8.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"e63q45f9h5fr.clickfunnels.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"e6tdy.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"e811f339-022f-470f-b514-131c3caecef7.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"e840b.escolatantra.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eab8bd4a-4dcc-42f2-b304-0268ccacb049.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eae5e.escolatantra.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eagleeyeapparel.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eagleeyeprojects-events.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eaglestar.com.myelf75irfhajtm3egepywelf75irfhajtm3egepywelf75irfhajtm3egepyw.servicecareireland.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eajbrqqggw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"earns-airdrop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"earns-airdrop.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"earnsairdrops.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200013893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"earth-tech.co.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200013894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"easepropertygroup.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"easychainconnect.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"easysaver.kr"; content:"Host"; http_header; classtype:attempted-recon; sid:200013897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eawier.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eb.l67n.cloudxperts.co.za"; content:"Host"; http_header; classtype:attempted-recon; sid:200013899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eb2a60df-5e4e-4ee6-97a8-c1c7f74e3c28.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eb473ad1-7ef4-4a5f-a0d0-2ccf7aace893.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eb809799-13bb-47be-9c16-11f998be2efc.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ebanking-ch3-ubs-4cb53.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ebanking-ch3-ubs-a3ab0.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ebanking-ch3-ubs-a3ab0.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ebay.com.store-usr.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200013906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ebbekqfmbs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ebbwwmsivb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ebhmyscadd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ebo1898mailhostchiameritech-lists4uwashingtonedu.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ebxhco.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ebxumvc.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200013912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ec2-3-138-103-150.us-east-2.compute.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ec2-54-157-4-63.compute-1.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ec3eos.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ecdermatologos.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eci.colormyth.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200013917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eclassrc.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200013918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eclipsemail.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"economic-poet-b50.notion.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200013920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ecosystem-shiba.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ecoulife.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ecrllc.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ecuadopichi--ecuado30499f.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200013924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"edavki-denar.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"edavki-denar.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"edavki-depozit.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"edavki-depozit.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"edavki-durs.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"edavki-durs.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"edavki-refund.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"edavki-refund.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"edbrooks.graphics"; content:"Host"; http_header; classtype:attempted-recon; sid:200013933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"edcorpsintl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"edfujvnvje.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"edgecryptood.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200013936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"edipod.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"editingthatworks.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"edkovlxiae.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"edments.edments.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"edoammifit.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"edocuments18032022app-1310252903.cos.na-ashburn.myqcloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"edqferqeqq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"edscgs.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200013944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"educaresatkhira.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"edufarm.com.np"; content:"Host"; http_header; classtype:attempted-recon; sid:200013946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"edzematestem.hu"; content:"Host"; http_header; classtype:attempted-recon; sid:200013947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ee-securebilling.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eeee-f67c3.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eeee-f67c3.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eegiqmhiab.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eejy91.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eellele999.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eenzscxpan.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eewaaoavgg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eezxqlaync.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"efad-sa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"efax-validates.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"efax-validates.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200013959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"efax25042022-webapps1-1311433986.cos.ap-chengdu.myqcloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"efaxmachine65454753.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200013961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"effettua-logincredenziali.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"efgsdsghn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"efin-gov.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200013964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"efinanceinvestment.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"efsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"efyegeh.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"egeegeggrwdw.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eggss.wtf"; content:"Host"; http_header; classtype:attempted-recon; sid:200013969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"egniol.co.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200013970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"egseem.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200013971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"egwoexivza.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"egyptvespa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ehegvgdvvbbsghxxbxbbbbxbbsjsjsiiolkajsueinkmncbv.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ehfbthnvst.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eightbit.project-mint.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200013976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ej4rcu.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200013977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ejqop.conain.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekdhgkad.ricuyyu.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200013979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekhaan.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200013980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekhehvyfwr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200013981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200013999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaccenet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceenet.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaceesnet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaacsenet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaeeenet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaaesenet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesacceeinet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.cocm-aesaceeeinet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaccenent.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceenent.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaceesnent.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaacsenent.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaeeenent.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaaesenent.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaccnet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacenet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacesnet.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesacsnet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaeenet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesaesnet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaceeinent.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescaeeeinent.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aescceinet.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com-aesceeinet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eki-net.com.personal.rrfef.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200014768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekishinkansen.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200014769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaaecnenet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaacneet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-ascaaeneet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaceenet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaaeneet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocm-asoaceeenet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200014999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaaaecnenet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaacneet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acaasneet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-acacseenet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaaesnenet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaaceenet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoaasneet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.cocmn-aoacseenet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaacneent.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaaeneent.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascacnet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-ascaenet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaceenent.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaaeneent.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoacenet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoaenet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asocaeeenent.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.com-asoceenet.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaacneent.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acaasneent.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acacnet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-acasnet.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accaseenent.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-accsenet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.xhjgzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaaceenent.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoaasneent.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.luhfkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoacenet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.eszvgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.evnvkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.jdseot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.jnnpzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.lznjyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.tnsslb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.xpwefc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aoasnet.zumcvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.akbled.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.attxii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.mornpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.pokxaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.uyieyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.yljhag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.zbapbj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocaseenent.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.aeovqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.afeslg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.annndo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.apewnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.emzdah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.eoapnu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.fnaqnd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.gosete.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.gzsmhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.harvqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.hkvyfy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.hxtwez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.ibbyok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.jagmug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.jrruet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.knqkcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.odbqkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.pdrdlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.qkvbig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.qssjlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.qwcpsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.rjtzrj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.synjht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.tbkaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.uuypov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.wrmjjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.xddylz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.ycdjgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.yklyvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.ynfezw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.zmkidv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl-net.comn-aocsenet.ztsqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl1-neettg.bond"; content:"Host"; http_header; classtype:attempted-recon; sid:200015962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekl1-neettn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200015963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ekrcneqwli.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200015964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elaborateonlyobservatorygrupbancolombia22.apreciado01.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200015965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elaobraz.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200015966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elbendittoferxii.ihostfull.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200015967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elctdme.or.tz"; content:"Host"; http_header; classtype:attempted-recon; sid:200015968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eldessarl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200015969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"electricianslexingtonky.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200015970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"electricjester.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200015971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"electricprevailingopen64.x7878.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200015972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"electrocoolhvacr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200015973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elegant-longma-e70add.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200015974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elektroonline.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200015975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elememt.market"; content:"Host"; http_header; classtype:attempted-recon; sid:200015976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elenemt.market"; content:"Host"; http_header; classtype:attempted-recon; sid:200015977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elfatnianass.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200015978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elfinanciero.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200015979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eliseulopes.pt"; content:"Host"; http_header; classtype:attempted-recon; sid:200015980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elissaalvey.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200015981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elite-ladies-here.life"; content:"Host"; http_header; classtype:attempted-recon; sid:200015982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elitedentalofsi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200015983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elitelashsupplies.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200015984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elleria-heroes-wl.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200015985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ellipticalpowderbluesite.687564534.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200015986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ello.euonwf.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200015987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elmec4you.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200015988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elomo.ro"; content:"Host"; http_header; classtype:attempted-recon; sid:200015989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elsewedy-td.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200015990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elta-pack.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200015991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elta-pack.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200015992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elta-paymypacket.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200015993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elta-paymypacket.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200015994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elta-paypackages.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200015995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elta-postal.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200015996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elta-postal.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200015997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elting-nn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200015998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"em5jf9.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200015999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"email-account-login776.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"email-uol-org.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200016001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"email-verification4.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"email302.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"emailers.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"emailsettings.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200016005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"emailwebaccess.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200016006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"emarket.ps"; content:"Host"; http_header; classtype:attempted-recon; sid:200016007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"embarkati.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"emconti.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"emememmde.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"emergencypestpatrol.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"emeta-up.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"emhbaszacn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"emissionebpcard.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"emissionebprcard.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"emlink.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200016016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"emmabajafrench.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"emmanuel-lechapelier.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200016018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"emmezaon-jp.asqads.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200016019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"emmezaon-jp.czpudl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200016020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"emmezaon-jp.hjjfpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200016021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"emmezaon-jp.kanzhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200016022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"emmezaon-jp.lydsji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200016023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"emmezaon-jp.rodvtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200016024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"emmezaon-jp.zmcika.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200016025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"empiolar.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200016026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"empiolat.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200016027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"empower-retirnnent.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"empty-boat-5019.dgentile8443.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"empty-paper-6486.on.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"empty-river-9729.qm4e2oon.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"emqcdyyvmr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"emunabg.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"emunufgnvb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"en-mailreturn-web.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"en.coistringtech.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"en.darpscentralsfix.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"en.kprfn.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"en.maintechresolves.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"en.vivuni.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"enbolivia.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"encorewaters.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"encqolrqjq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"encryptaiu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"encryptbtck.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"encryptdrive.booogle.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200016046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"encrypted-sign-in-to-view-exel-document.us-southeast-1.linodeobjects.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"encrypthkpd.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"encryptmessages.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"encryptodapps.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"encuesta17.umecit.edu.pa"; content:"Host"; http_header; classtype:attempted-recon; sid:200016051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"encunar.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200016052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eneco.nl.groene.stroom.gasenergie.21631-4118.s2.webspace.re"; content:"Host"; http_header; classtype:attempted-recon; sid:200016053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eneralpanama--bancaonlinebg.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"energy-rebate-gov.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"energy-rebate-gov.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"energy-rebate-uk.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"energyshop-bitflyer.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"enfoquedeportivo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eng-sharepointdocs.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"engcamp.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"engidagraphics.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"engineeringcoaching.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"enitbkcyzi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"enjoyapartments.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"enlargementguide.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"enlinea01.herokuapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"enmodofeliz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ennix.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"enoklkfduw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"enroltoearn.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200016071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ens-airdrop.domains"; content:"Host"; http_header; classtype:attempted-recon; sid:200016072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ensdomains.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200016073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ensgiveaway.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"enter.ferrelaminas.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"enternew-107315.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200016076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"entertainindy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"entikongbordercity.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"entirethoughtfulexternalcommand.awacate34.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"entranceloginmicrosoftrt.outlkmaelier.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"entrepreneurmeetupapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"entsperren-bestatigung.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"enxnqtbmru.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"enzomaluiza.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eolrlbjmaz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eon-aktualisierung.ddns.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200016086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eoqsusjvey.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eoubdcpfyi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eoxpycjiuz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ep-2hv.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"epi9rf.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"epistemeinstituto.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"epk.is"; content:"Host"; http_header; classtype:attempted-recon; sid:200016093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"epochfinancialus.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"epoxqzauzy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"epqjcyqtvw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eq.pe"; content:"Host"; http_header; classtype:attempted-recon; sid:200016097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eqgbd0.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eqnmcukioq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eqofuh.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eqsas.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eqsnncygsl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"equaldisgustingbundledsoftware.miguelalvarez21.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"equinixcapital.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"equistone.uk.wqo2y1162d.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200016105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"erc20-coin.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200016106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eresnuestroganador.liveblog365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eresnuestroganadorr.liveblog365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ergera.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ergrfb.h39uwtya.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200016110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ericadeseno.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"erie-52482.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"erie-52482.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eriks.com.sg"; content:"Host"; http_header; classtype:attempted-recon; sid:200016114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"erpparadigm.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"err-maildelivery.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200016116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ershamshad.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200016117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ertyuyiu-10665345679.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"erzem-uaaaa-aaaad-qeoba-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"es7547548339596581.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"es93844772.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"escueladecreativos.com.ar"; content:"Host"; http_header; classtype:attempted-recon; sid:200016122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"escuelawanderlust.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"esd-dbs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eseowmhoct.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eservicecembraa-ch.myvnc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"esfdesentakip.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"esfnkvu.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200016128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eshkes.hostenko.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200016129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"esig.co.kr"; content:"Host"; http_header; classtype:attempted-recon; sid:200016130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"esmks4z.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"espace.podlink.to"; content:"Host"; http_header; classtype:attempted-recon; sid:200016132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"espace.servebeer.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"espaceclients-cpam.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200016134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"espacegouv-critair.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200016135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"espacioajeno.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"espacne.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"especialsuacozinha.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"esperanzabravo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"essshssg.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"estiloshein.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"estjzmzklbx.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"esvwvfvusm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eswtcv.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"esykwtwnza.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eszxvtufqz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"et-magiic-soll-enter-eth-9.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"et.interac.ca-emt.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200016148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"etapesdevalidationpersonnelle.erreinterdanslaplace.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"etaqtedfux.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"etatrecharge.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"etc-co.weisdn.yunhuilian.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200016152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"etc.co-asdzxc.weixiaofan.com.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200016153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eth-doft.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200016154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eth-pos.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200016155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eth-shibawapp-officiall-new-3th.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eth-wintermute.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200016157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ethbw.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200016158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ethcmp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ethdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200016160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ethereum-18miningarea.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ethereum-ksm.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ethereum-mining.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200016163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ethereumtowers.inmint.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200016164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ethereumyy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ethermscan.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200016166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ethers-airdrops.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200016167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ethersairdrops.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200016168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"etherscatn.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200016169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"etherscnan.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200016170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"etherscxan.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200016171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ethersczan.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200016172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ethersscan.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200016173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ethhex.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ethjq.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200016175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ethjs.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200016176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ethju.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200016177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ethme.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ethmining.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200016179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ethnictrendz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ethpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200016181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ethsairdrop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"etikhgcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200016183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"etki-wcasnust.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200016184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"etlte.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"etnexcot.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200016186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"etutorel.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"etygu-75eb8.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"etygu-75eb8.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eughdz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eugnerally-wixsite-com.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eukl-tsecszu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200016192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eulxugspof.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eurdefi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eurobengal.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eurojust.ro"; content:"Host"; http_header; classtype:attempted-recon; sid:200016196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eurolatspluss.lv"; content:"Host"; http_header; classtype:attempted-recon; sid:200016197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"euronciatours.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"europe-theater.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"euroquimica.com.py"; content:"Host"; http_header; classtype:attempted-recon; sid:200016200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"euujokorqp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"euvencendo.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200016202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ev3db3.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"evadeetvous.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"evdvvwzroz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"evenementsgourmands.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"event-login.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200016207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"event-trustpad.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"event-trustpads.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200016209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ever.diition.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200016210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"everestmotors.com.np"; content:"Host"; http_header; classtype:attempted-recon; sid:200016211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"everscale-ecosystem.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"everybodys.quick-mint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"evolbithman.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"evolutionsny.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"evri-uk-package.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"evri-uk-package.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"evrxnepyeb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ewdljcbvrs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ewoaylrmyy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ewrgguogyy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ewwe-e7bcb.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ewwe-e7bcb.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ewzsgqwvhv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ex-newr.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"examwatch.website"; content:"Host"; http_header; classtype:attempted-recon; sid:200016226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exbitkubpro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"excessive-mirror-bite.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200016228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exch-093data0303.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exch-093data0303.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exchange-bestexchange.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exchange4free.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"executivehomewatchaz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exemplaryalphanumericmapping.hurrem.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exhpgmttqg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exito-validation.260mb.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200016236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exitotuyapayfmw.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200016237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exitsecutt.260mb.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200016238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exodos-wallet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exodus-dot-sharepointexcel-362410.uk.r.appspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exodus.com.download-wallet.arcticasfalt.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exodus.com.merge.adnansohail.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exodus.com.merge.newsfram.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exodus.com.queenspharm.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exodus.desolhealthgroup.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exodus.digitalpeople.co.ke"; content:"Host"; http_header; classtype:attempted-recon; sid:200016246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exodus.lawsthertechnologies.co.ke"; content:"Host"; http_header; classtype:attempted-recon; sid:200016247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exodus.llevatelo.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200016248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exodus.nbfsystem.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exodus.nutribei.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exodus.omborrecruitment.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exodus.proincol.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200016252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exodus.supportphrases.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exodus.yathra-travels-promotions.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exoduswalletus.talentlms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exodux-wallet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exoldus.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exosama-mint.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200016258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"expensivefesparsefe.joferdbb.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"experiencedpertinentlist--gdbsfgb.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exploreaoe.com-rfq-specifications.smpn1cilegon.sch.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200016261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"express-is837.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"express-secud.builderallwppro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"expressil-15323.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"expressil-15323.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"expressil-a749b.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"expressil-a749b.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"expressinthoughts.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"extensao-armarinhostome-calxa.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"extensaodehojeoffiline.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200016270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"extension-metamask.feindor.dk"; content:"Host"; http_header; classtype:attempted-recon; sid:200016271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"extnsion.mteamask.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"extrabrasilonline.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"extraprestamo-solicitudenproceso.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ey2pq-ciaaa-aaaad-qeoaq-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eyebeyasvda.liveblog365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eyewebsolution.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200016277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eygvgtyspv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eyhc11.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eyhydd.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eysrnypfea.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ezblox.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200016282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ezekcllub.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200016283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ezkl-oedsasue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200016284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ezkl-oernasue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200016285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ezkl-oesnasue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200016286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ezkl-oeswssue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200016287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ezkl-oeurasue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200016288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ezkl-orstazue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200016289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ezkl-orstusue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200016290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ezkl-zexunes.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200016291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ezkl-zunsaes.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200016292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ezluzxleas.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ezqgvx.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ezssausage.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ezyaivazrg.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ezyaivazrg.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ezyceslfyq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ezyvgzuloc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ezzboiyejk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"f.ls"; content:"Host"; http_header; classtype:attempted-recon; sid:200016301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"f032.x10.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200016302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"f1867131-36f7-4b65-ad23-987212168e22.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"f28b7c52c450.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"f2pools.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200016305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"f340-gf9-3j5r49fokwmre-09gnhw-r0jnmvfcejfefe.obs.ap-southeast-3.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"f43e0e.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"f51d6dc3-0596-4028-b235-b1455e78a966.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"f61f--b67b.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"f63e4694-6839-4eba-a014-a51ce579ffa0.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"f640d9f9-957c-4fd2-804e-8834f407e2fa.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"f6f991371-62598.portmap.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200016312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"f7543f8081ce47f6aae2d816d72cab12.jaguarverse.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200016313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"f761a1c4-5987-4161-93f6-e15e7c5e3e87.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"f7b8870cd2801tau.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200016315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"f83a7aea-c22b-42dd-89b4-f84626c8f65c.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"f9w1lned0ruqblxi6jahwotak.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fabricadecarimbosechaves.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facademy.eabyas.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200016319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"face.huongdancaidat.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebook--login.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200016321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebook-accts.pages-recovery.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebook-help-10014887759101.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebook-help-10014887759101.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebook-help-1001745724578101.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebook-help-1001745724578101.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebook-help-20024145785202.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebook-help-20024145785202.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebook-help-3003428746303.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebook-help-3003428746303.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebook-help-50054245178505.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebook-help-50054245178505.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebook-help-70074128541707.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebook-help-70074128541707.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebook-verifyissue-meta270.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200016335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebook-verifyissue-meta378.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200016336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebook-verifyissue-meta381.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200016337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebook.linkit.sk"; content:"Host"; http_header; classtype:attempted-recon; sid:200016338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebook.wodans-son.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebookreport35.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200016340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facenboollogin.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fachuiadfu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facilele.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"factgrading.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"factorfiction.ca"; content:"Host"; http_header; classtype:attempted-recon; sid:200016345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fafyaceydi.temp.swtest.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200016346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fairpollan.build067.wpsandbox.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"faithfamilyintl.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"faizankhan0408.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200016349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"falconetti1978.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"falconinternational.com.np"; content:"Host"; http_header; classtype:attempted-recon; sid:200016351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"faleballe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"famosauto.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"famous-druid-4c07a4.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fancy-rain-22bf.vakagew948.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fancy.bibirgadangdicipok.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fangyanbj.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fanm.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"faradaydesy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"faruq.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200016360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fast.for-orders.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fastdelivery8cialis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fasterunlocks.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fastrectifier.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fatrur-web.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fattajufurniture.com.np"; content:"Host"; http_header; classtype:attempted-recon; sid:200016366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fatura-online-ilustrativa.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200016367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fatura.life"; content:"Host"; http_header; classtype:attempted-recon; sid:200016368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"faturahiper.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200016369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"faturarenner.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200016370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"faulknae.bond"; content:"Host"; http_header; classtype:attempted-recon; sid:200016371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"favorite-108668.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fax-doc25042022webfax-1311433986.cos.ap-nanjing.myqcloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fax-docs261022mic0app-1312962597.cos.na-toronto.myqcloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fax07032022doc1-1310019602.cos.na-siliconvalley.myqcloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fax07042022fax498apps58-1310726006.cos.ap-seoul.myqcloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fax156008345fx46900fx-1309906520.cos.na-ashburn.myqcloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"faze9.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fb-appeal-form-128679122.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fb-case-id-28031803-fcdc-48af.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fb-com-1023442367-review.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fb-com-1023442367-review.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fb-community-standards-344255.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fb-community-standards-344255.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fb-community-standards-4425215.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fb-community-standards-4425215.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fb-community-standards-5021214.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fb-community-standards-588410.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fb-pages.proteksion-help.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fb-restriction-case-1ce84.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fb-restriction-case-1ce84.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fb-restriction-case-7092a.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fb-restriction-case-b20d3.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fb7927.bget.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200016394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fbcaseid.10085109200985209.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fbcom-accounts1000007715551.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fbcom-case10052256313.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fbcqrigdsb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fbcukgxsum.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fbookhelpsupport.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fbookhelpsupport.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fbvccoxhvd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fbverificationalert.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fbyrtw6txrycuioc64xx.quilers.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200016404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fccfc.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fckzjjumub.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fcxesewcubexcy.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fcxesewcubexcy.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fd90914a-a07b-48f8-9d99-c22d20cf0818.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fdgbedsf.h17euwyt.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200016410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fdikom.uinjkt.ac.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200016411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fdjdwsmura.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fdre-e589c.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fdre-e589c.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fduiktszhl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fe8b1a89798e43ceb1b15a2a0d7e1193.kangarooverse.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200016416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fedax-parcel-shipping-code.builderallwppro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"federales.validacionoficial.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fedex-usa.support-usps.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"feelbons.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"feetfootish.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"feil.gbtefxryt7-95m32xerr6rv.p.temp-site.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200016422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"feitopvc.digital"; content:"Host"; http_header; classtype:attempted-recon; sid:200016423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fekon.upp.ac.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200016424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"felhabcxmc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"felixluu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"femqicvexp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"femtibkrak.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fenzgard.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fertilizer.gov.bd"; content:"Host"; http_header; classtype:attempted-recon; sid:200016430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fervent-yalow.188-166-251-158.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200016431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fespopisti.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"festadopinhao.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"festive-greider.5-255-101-246.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200016434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fetale.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200016435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fetc-tao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200016436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fetsvjavjv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"feupnsxeyv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"feyzy0.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fezaprefabrik.com.tr"; content:"Host"; http_header; classtype:attempted-recon; sid:200016440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ff.koh7.dr-abavisani.ir"; content:"Host"; http_header; classtype:attempted-recon; sid:200016441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ff.member.garerna.vn"; content:"Host"; http_header; classtype:attempted-recon; sid:200016442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ffe2fd9b-c36d-4ef0-926f-0a238e86e958.id.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ffgsfwecc.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200016444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ffh.gov.mz"; content:"Host"; http_header; classtype:attempted-recon; sid:200016445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ffinbank.herokuapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ffmueggelheim.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200016447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fftyy-911c8.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fftyy-911c8.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ffyzoivpex.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fghbl.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fghdskjhgjhkljg.ihostfull.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fghjkjhgfd7.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fghjr74rhudfguhtfguji.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fgnfgnnfbf.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200016455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fgnngffhdgd43.liveblog365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fgxjsuzoyj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fh3g045fj-whner9-gfvbhwg-0ecjfw-0fhrg-09whre9-gvh.obs.af-south-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fhbdff.w8ru10tw.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200016459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fhfdanmgtp.deborah-king537.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fi-neearwallet.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fic0hsahnhondu.fiochsahondur8.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fichosacom.eladiocarrion1.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ficohsa09.fiohh.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ficohsaa08.lafisee08.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fidelitybank-ng.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200016466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fifththirdonline.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fifththirdonline.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"file-cloud-download.remit-advance.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"file-login-micro-drive-doc.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"file-login-micro-drive-doc.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"file-project-shared.init-datings.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"file-share-drive-micro-login-view.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"file-share-login-folder-local.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"file-share-login-folder-local.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"file-shared-clouds.data-shared.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"file0z.onedrive0001.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"file2635.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"file34567-697c2.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"file34567-697c2.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"filedocument-updates.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"files-secure-folder.ansimapreg.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"files.recloud-shared.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fileupdate-docs.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"filex.onedrive0001.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"filex001.onedrive0001.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fileyellowelite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"filiale05-177-mps.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200016488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"film.jaheshguilan.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"finalizarsolicitud.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200016490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"finalreceipt-2395.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"financialreceipt-19394.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"findarealtorinmaine.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"findmy-ue.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200016494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"findmyid.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"finegone.neocities.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"finfutureonliup.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"finfutureonliup.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"finprovhire.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fionaickkey.buzz"; content:"Host"; http_header; classtype:attempted-recon; sid:200016500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fir-8da4d.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fir-8da4d.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fir41109.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fir41109.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fire.martobang.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fire99-kb8.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"firstalert.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200016507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"firstsourcesbus.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fish-workable-meadowlark.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200016509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fishingsnapper.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fitnessdepotottawa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fiverrespana.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fixedfl0af.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fixedfloait.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fixedmoments.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fjjfjdf.sitey.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200016516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fjypnbtgad.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fkioiseowl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fklfiivgpd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fladestateins.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"flamboyantmicrostructs.allgominsprovin.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"flashphotographypics.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"flashyunrealisticgoal.modaempresa.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"flat-9be3.marpuasabentar.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"flcancer39-px.rtrk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fleetshop-file-0utl00k-storage.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fleetshop-file-0utl00k-storage.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fleur-de-cristal.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"floranostra.hu"; content:"Host"; http_header; classtype:attempted-recon; sid:200016529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"florejackie.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200016530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"flowserve-us.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"flukey-swabs.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fluksrv.mycpanel.rs"; content:"Host"; http_header; classtype:attempted-recon; sid:200016533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fluttergirl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"flyairprestige.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"flydubai-staging-app-current.azureedge.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200016536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"flyrine.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"flyvfrontier.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200016538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fmaformation.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200016539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fmiqdletnn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fmvswufbme.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fmwszwgnxk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fnogfjsmdz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fnuckrozvy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"foasal-port.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"focused-brattain-7f5e5f.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"focused-elbakyan.34-135-142-3.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200016547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"focusinmykiller.julianbrant.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fodstores.name.ng"; content:"Host"; http_header; classtype:attempted-recon; sid:200016549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"foggy-butter-rice.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200016550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"folder-preview-project.privatee-inv.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"folder-private-project.important-chat.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"folder-shared-file.voice-chatt.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"folder.verify-files.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"followershipdesign.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fondation-uca.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fondunlawfulpoint545.bankvirtual523.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"foodcarry.co.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200016558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"foot.ludtic.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200016559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"foot.severid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200016560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"footium.this-premint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"forandes.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"foratech.ca"; content:"Host"; http_header; classtype:attempted-recon; sid:200016563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"forbusinesupdate2022.my.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200016564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"forestgreebancolombiasucursal.dinamiica.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"foreverunique00001.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"foreverunique00002.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"foreverunique00003.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"foreverunique00003.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"foreverunique00008.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"foreverunique00008.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"foreverunique00009.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"forlenewoods.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"form.nativeforms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"forma-works.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formanandmon.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200016576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formation-world.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200016577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formattacredenzialiweb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formbuddy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formez-vous.eligibilite-web.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"forms.formium.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200016581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"forms.sendpulse.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formtools.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formulaire-information-certificat.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formulairecartev.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200016585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formulairevitale-ameli.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200016586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formulariodeactivacionbccr.webnode.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200016587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formulariodigital.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formularx00011.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formularx00012.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formularx0003.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formularx0006.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formularx0006.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formularx0008.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formularx0009.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formularxx2000.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formularxx2001.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formularxx2001.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formularxx20010.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formularxx20014.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formularxx20016.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formularxx2002.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formularxx20024.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formularxx20029.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formularxx20029.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formularxx2006.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formularxx2007.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fornallapichin.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fortmatictvt.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fortmatictvt.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200016610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fortul.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fortunatedarkorchidargument873719.bienvenidoslmcd.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"forwardwithlagevrio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fosterfulllegh.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fota-ogarnieta.eu"; content:"Host"; http_header; classtype:attempted-recon; sid:200016615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fpe42zr.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fpnzzxvdgg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fpwcs.valiist.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200016618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fqadr3.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fqfvstdmpu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fqmvcievvc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fqzgghjrnl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fr-europe564598-com.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fracturexnetwork.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fragrant-forest-bbd6.woolcodeddd.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fragrant-grass-5770.scrtygdjahg.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fragrant-sunset-5373.fenynhimi.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fragrantghgh.onedrive0001.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"frailokapi.build067.wpsandbox.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"franceorange.s3.eu-central-1.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"frankfurtertsparkasse.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fred8176.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fredericai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200016633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"freefantasybook.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"freeliker.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200016635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"freeprocrack.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"freesolana.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"freesolanamining.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"freg-nine.pt"; content:"Host"; http_header; classtype:attempted-recon; sid:200016639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"freim-regulation.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200016640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"friendly-donut-66d4ca.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"friendsofnechockey.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"friesenza.qfhv5wsook-ewx3ldk9m6zq.p.temp-site.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200016643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"friesssd0006.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"friko2u.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"frlsevjxmx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"frohousedr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"frolicking-cannoli-b2c810.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"frontaal-it.be"; content:"Host"; http_header; classtype:attempted-recon; sid:200016649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"frontalmailsubjected424567898765456-76545676545676.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"frosty-credit-9294.on.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"frosty.jealousautomati.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"frr603.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"frugalabundance.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"frugalmidnightblueobjects.christianherre6.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fsb1cn.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fsdpwmbsnr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fseqyembbb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fsgafga.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fsjiefavdf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fspciahkkb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fsrsgvbsgbghbdehujbndyyghbndeghbbdebplbnmmsbcvbdtyghdbgggab.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fssfokudnf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fti.unmerpas.ac.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200016664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ftp.cnc.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200016665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ftvkgganhv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ftx-earnwallet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ftx-pro-register.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200016668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ftx-register.biz"; content:"Host"; http_header; classtype:attempted-recon; sid:200016669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ftx-register.website"; content:"Host"; http_header; classtype:attempted-recon; sid:200016670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ftx.cool"; content:"Host"; http_header; classtype:attempted-recon; sid:200016671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ftx012.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ftx666888123ftxapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ftxairdrop.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200016674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ftxc8.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ftxus.club"; content:"Host"; http_header; classtype:attempted-recon; sid:200016676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fubanggov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200016677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fujqybuqxa.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"full.mailboxs.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fullcarchonchi.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200016680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fundacionelarcadenoe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"funiswap.exchange"; content:"Host"; http_header; classtype:attempted-recon; sid:200016682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"funnygames.veramorozova.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"furniturewholesaler.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200016684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"furryvengeancefve1.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fut-sign.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fut-sign.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"futuretoday.lol"; content:"Host"; http_header; classtype:attempted-recon; sid:200016688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fvuoeadluf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fvxdvgceyo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fwclnj.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fx164fax08022022fax-1310019602.cos.eu-frankfurt.myqcloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fx23032022fx1apps87-1310418193.cos.eu-frankfurt.myqcloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fx406543docs4580246-1309906520.cos.eu-frankfurt.myqcloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fxdch8.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fxfpwejmrk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fyjsvz.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fyprxtnjun.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fytgyu-d3ea2.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fytgyu-d3ea2.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fytknkexcq.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fytknkexcq.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fyufnolkwi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fyunmdwwxc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fyyiflddtr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fzabdjmwkj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fzhcmfvdpe.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fzjirpixsl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fzlmucbklv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fzozmoucli.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fzsrjiybay.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"g-c.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"g-mtcc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"g5g-04rkgj-9whern-g09n-edrf9vhnw-er9hjgf-9fef.obs.ap-southeast-3.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"g65g--f35f.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"g6puo3.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"g980gy-08gfut6df-0fr6f-0fg-0f8yfv70-fyf8yu7.obs.ap-southeast-2.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"g9oh94.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gaawrnjdbs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gablenel.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gafnzuaqnn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gafonline.mil.gh"; content:"Host"; http_header; classtype:attempted-recon; sid:200016722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gahyoam.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gain-capitals.ltd"; content:"Host"; http_header; classtype:attempted-recon; sid:200016724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gaincelo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gakkoversenft.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200016726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gala-bakes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gala-games-m.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"galactic-explorers-official-wl.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"galae-gamesr-z.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"galagames-lapp.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"galic001.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"galicciaar.toeknseguro.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"galicia.moonrivery.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"galicia05.gali6.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"galicia08home4--galic55.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"galicia08home4.galic55.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"galicia09--joseje.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"galiciaarsed--galiziasp2.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"galiciadzxz.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"galiciahome.galicia123.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"galiciake.galica2u8.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"galiciaonline.galiciaalert.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"galicisass.altener22.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"galiclahom--nythoanm111.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"galleryofthemind.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gamarlmhns.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"game-defiknidgoms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"game.hicage.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"game.ludtic.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200016750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"game.trixeur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200016751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gamerpay.info.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200016752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ganaderiaaltamira.com.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200016753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"garbege-friends.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200016754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"garenefreefire.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"garpwleqgc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"garylaw0023.bitbucket.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200016757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gatza-shibaswap.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gaylaumayr107437.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200016759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gb2world.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gbhdhrozzy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gbogruhckg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gbonplqgjm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gbqfxlzamn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gbsdd.h64uwtya.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200016765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gbvfdf.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gc.elin.co.za"; content:"Host"; http_header; classtype:attempted-recon; sid:200016767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gcgfgmysct.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gd543hfh.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gdpflztxrf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gdxdnea.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200016771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"geaoodyrrz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gear.seboory.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200016773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"geetikamanucha.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"geiq-btp45.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200016775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gemini-00e.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"geminimobimovel.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"genblok.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gene-tiic.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"genehmigencorner.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"general--bancogeneral12.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"general--bancogeneral2.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"general.authloginmail.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"general.general-auth.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"general.generalauthmailbox.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"general.timeoutauth.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"general0493043.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"generalaa-e69f4.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"generalaa-e69f4.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"generali.com678wzrgjgosniulfnietjs0o.vertexdesenvolvimento.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200016790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"generateethereum.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"generizza-startss.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"genie-alba.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"geniusinu.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200016794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"genopets-verify-connect.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200016795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gentl.bibirkumaumeletus.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gentle-rice-fbd3.xerid998931691.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"genuineundead.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200016798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"geoworks.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gepco-jobs.pitc.com.pk"; content:"Host"; http_header; classtype:attempted-recon; sid:200016800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"geraldinen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200016801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gerencia-app-juridics-mizu.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gerenciador-financeiroempresarial-br.eastus2.cloudapp.azure.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gerenciando-da-fatura.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gerlanguages-serverde.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200016805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"germantrinidad.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gestion-ameli-fr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gestionarcitadaviviendaenlinea.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gestionsigwebchile.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"getapps.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200016810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"getdrop.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200016811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"getexodus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200016812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"getfremlbb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"getfrimacound.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200016814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"getlikesfree.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"getrikposzr231000cntras.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200016816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gevmara.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gezwurokmi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gf43h5j9o0g0-rwejg-0whbng-0w8henbv0-wh0-fgerfg.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gfery.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gfghivzamz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gfizncjxob.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gfq24iubjf3rr8382382.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200016823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gfspimgvei.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gfufqalhph.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gfwwardrxo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ggdfdfd.mfs.gg"; content:"Host"; http_header; classtype:attempted-recon; sid:200016827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ggdss-ac89e.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ggdss-ac89e.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ggffftfhhfft.byethost5.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gghy-911ff.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ggjkl.sflxsd.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200016832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ggmoalktez.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ggnhcdklsn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ghaniyyat.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200016835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ghbkul.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ghbqpsoxxo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ghdh.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ghgivwyakc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ghjhp.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ghjkhgfdghjk.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200016841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ghkishmzgg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ghl9uc.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ghntywxonl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ghorana.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ghrt.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ghwvsziybd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ghxsts.premint-now.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"giacngungon.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200016849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gift24.namaltek.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gifted-black.151-80-79-188.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200016851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gijgpary.liveblog365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gijsoxe.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200016853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gikrgkctsl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gil56365778bfv.hubiong.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gildavy.bond"; content:"Host"; http_header; classtype:attempted-recon; sid:200016856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gilgyanarj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gilkasilva.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gillrebecca.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200016859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"girls-tube.mobi"; content:"Host"; http_header; classtype:attempted-recon; sid:200016860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"girokonto-dkb.de-banking.hpls.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200016861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gistwatchdog.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"git.sitemaps.stepnn-bayc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gitep.com.ar"; content:"Host"; http_header; classtype:attempted-recon; sid:200016864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"github.leikaifeng.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gkiacia--emiinant.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gkiacia.emiinant.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gknyiryxlp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gko8fu.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"glbxvyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200016870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"glceudthja.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gld-battery.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gldcmedjfg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gldektzigc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"glennrothenberg.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"glfdsbcauthenticate.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"glhdacccountconfig.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"glittery-travesseiro-967736.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gljaptfdjn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"glmstrategies.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"globalgroupofeducation.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"globalmarketleverage.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"globalofficecenter.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"globaltrader.asia"; content:"Host"; http_header; classtype:attempted-recon; sid:200016884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"globaltravels.co.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200016885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"globalwelding.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200016886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"globovidrosss.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"glog.at"; content:"Host"; http_header; classtype:attempted-recon; sid:200016888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"glogo.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"glowuprices.herokuapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"glskjuiuib.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"glsword.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gluilt-gneaurn-mckeirn.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gmenduroracingteam.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200016894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gmfksqbvuf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gmgroupllc.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gmlysf.gq"; content:"Host"; http_header; classtype:attempted-recon; sid:200016897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gmmoveiis.myshopify.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gmo-aozora.earatr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gmrxdzwltg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gmsocrates.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200016901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gmx-deutschland-gmbh4.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gmxjjt.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gmxlitt.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gmxverifications.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gmxwyp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gmynet.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gneury-schliards-typicy.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gnjxxpetlq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gnosis-appsafe.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200016910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gnosis-connect.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200016911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gnosis-safe-io-app.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200016912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gnosis-safeapp.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200016913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gnosis-safeconnect.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200016914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gnyddvpmik.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"go-to-world-cup2022.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"go.law"; content:"Host"; http_header; classtype:attempted-recon; sid:200016917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"go.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200016918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"goballoons.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200016919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gobjarimua.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"goblintown.minting-start.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gobmx.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gocloudasiaacademe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"godocusign-login.rackapp.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gojhd.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gojmubg-bxn-9.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200016926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"golabaton.ir"; content:"Host"; http_header; classtype:attempted-recon; sid:200016927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"goldenlasgidi1.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"goldenlasgidi11.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"goldenlasgidi15.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"goldenlasgidi17.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"goldenlasgidi21.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"goldenlasgidi23.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"goldenlasgidi26.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"goldenlasgidi27.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"goldenlasgidi29.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"goldyirrigation.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gollardtime.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gonauowmkv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gonline-blznesplanet.cloud"; content:"Host"; http_header; classtype:attempted-recon; sid:200016940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gonzaleztransformacion.com.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200016941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gonzalolandazuri.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"good-of-ukrainian.com.ua"; content:"Host"; http_header; classtype:attempted-recon; sid:200016943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"good12345.tripod.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"goods-vihted.8878871.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200016945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"goodw2.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"goofy-dubinsky.51-254-161-133.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200016947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"googlealerts.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200016948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"googledrive.delbert.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gorealjet.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"goshenlandfarms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gougleen.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gov-uk-bills.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gov-uk-bills.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gp101.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gpark.co.il"; content:"Host"; http_header; classtype:attempted-recon; sid:200016956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gpcarautocenter-web-sand-home.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gpcvftptxn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gpusuldgcc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gpw9.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gqcfdtdppa.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gquzcrezlt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gqyyxdwkxz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"grace2much.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gracinfocom.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gracinfocom.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gracious-liskov.159-203-13-232.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200016967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"grandchange.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"grandsnowaddition.provinciia69arg.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"granitemastercolumbus.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"granularexcitingspools.acessacco2020.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"grapetoglass.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200016972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"graphic-boulder-301015.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"graycraft.giveaway-premint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"great.fugrest.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200016975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"great.ledfier.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200016976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"great.loglet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200016977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"greatwallrak.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"greedisland.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200016979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"greedyrepulsivebancolombia.sucursalperson.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"green--dream--6331-on-fleek-co.translate.goog"; content:"Host"; http_header; classtype:attempted-recon; sid:200016981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"green-pine-7fe7.do020.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200016982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"green-sac.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"greenook.gbtefxryt7-95m32xerr6rv.p.temp-site.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200016984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"greenpaczka.cloud"; content:"Host"; http_header; classtype:attempted-recon; sid:200016985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"greenpathstrategies.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gresartlog.redirectme.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200016987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"grillpartssearch.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"grizly.fi"; content:"Host"; http_header; classtype:attempted-recon; sid:200016989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"grorcjpjts.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200016990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"groupavian.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"groupesuseg.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200016992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"grove-5bd0a.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"grove-5bd0a.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200016994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"growthmatter.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"grst.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gruagy-sut-psycheost.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200016997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"grupbancolomb14miserlyunrealisticarchitectbancolombi4.cl4vedinamic4.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"grupbancolomb1apasslasticrequiredrobodoc.debloqueo.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200016999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"grupbancolombi4clavdinamik22misguidedlightcyanscandisk.regvirtualdin4.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"grupo675.cupo675.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"grupobancolombia.autenticacion02.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"grupocolombia0.virtual237.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"grupodetrabajo.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200017004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"grupoelectorial.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200017005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"grupoexito.aumentostuya1.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"grupoexitopaya.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200017007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"grupomusicalenguayaquil.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"grupoonix.cong.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200017009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"grupoopenix.com.ar"; content:"Host"; http_header; classtype:attempted-recon; sid:200017010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"grupoosinez.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200017011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gruposanisidro.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200017012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gruppobperbanca.meubleimpex.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gruppobperbanca.purnnikajyotish.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gryadkacafe.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200017015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gsdedwd.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gslk54q.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gssispxzll.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gsuite.visioinformatika.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gt-portalpode-conta-baanesee.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gtemgd.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gtemgd.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gtesgms.eu3.biz"; content:"Host"; http_header; classtype:attempted-recon; sid:200017023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gteweydael.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gtifzzp.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200017025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gtigrovvs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gtwmnnglob.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gtyaner.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"guatemala-industrial02015532.marylina002.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gudhoffryt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"guiacomoimportar.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gujlmeqrfs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gulfgpsgroup.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gummyoutgoingtoolbox.daviplta.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gunssensas.natiss.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"guoawashaio.mefound.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"guperare.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gupperita.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"guprosselecto.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200017039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gurbetfm.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200017040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gurukanth.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"guttural-holiday.surge.sh"; content:"Host"; http_header; classtype:attempted-recon; sid:200017042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gvprnjnwyu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gvqypusgwt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gvrq24.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gw20vl.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gwbuesvdho.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gwddouxmuf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gwmbsgioht.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gwncbyncgk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gwqjjslzbh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gwvat7.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gxa1ij.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gxedqmyxlm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gxmzvptjem.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gxuphejxdu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gxuzcgvkwn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gyefimxzzj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gymnanou.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gynocyzpbb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gyviesaipk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gzabjnqznq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gzctyrmpyb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gzsgvltkaf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"h-105734.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"h3h556.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"h46h--b267b.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"h5.b2bxjea.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"h5.croknqp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"h5.fxzqpgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"h5.gefun37352.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"h5.gefun68299.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"h5.gefun79595.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"h5.gobsaym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"h5.hiflyk28075.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"h5.jkozclh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"h5.mhevtwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"h5.miaycel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"h5.unicefcicr.world"; content:"Host"; http_header; classtype:attempted-recon; sid:200017079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"h67h--f35f.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"h78i--32523ttew.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"h9is92.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"habbocreditosparati.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"habi10100200.liveblog365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"habuvbwyki.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hacedordeaventuras.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hadeedethopia.nyatechservices.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hahdaeupdate.es.tl"; content:"Host"; http_header; classtype:attempted-recon; sid:200017088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hakbukcaptcha21.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200017089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hakdsjxajm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hakzycklld.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"halibotton.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200017092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hall-arch.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"halloween-rtfkt.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"halykbankres.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200017095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"handakai.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200017096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"handelaar.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"handvina.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hangarmotosbraz.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hangovertest1.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hanklngdbs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hanshangshop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"happy-franklin.54-39-201-108.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200017103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"happyimfull.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"happyshop.com.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hard.useie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"harmlessessentialpercent99.topol.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"harmoniousradiantmetric.bebeazul.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"haroldhazard1-wixsite-com.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hatocorozal.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"havnlwsnpi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hayatfoundation.org.sa"; content:"Host"; http_header; classtype:attempted-recon; sid:200017112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hbsdvdvjd.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200017113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hbutjjamoo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hbvnhqpjyt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hbwjarabay.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hcfwbfcqwf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hcyafupwig.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hcyrwozlin.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hd-ujfc1.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hd-ujfc1.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hd7zoo.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hdaximegpf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hdcxbew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hdee-373a3.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hdee-373a3.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hdkkuush.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200017127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hdmas.com.ar"; content:"Host"; http_header; classtype:attempted-recon; sid:200017128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hdojbedyqf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hdsggeygfgey.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200017130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hdwjmim.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200017131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"heahn-pleamp-glacts.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"healthatlums.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"healthlogus.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"healthnpdaily.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"healthnuthaven.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"healthperformance.ch"; content:"Host"; http_header; classtype:attempted-recon; sid:200017137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"healthyharvestke.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hearingaid911.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"heartworktattoofestival.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"heathenson.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hechoparati.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200017142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"heclaqsd.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hedefpanel.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200017144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hein.fun"; content:"Host"; http_header; classtype:attempted-recon; sid:200017145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"heinthu1.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200017146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hekhgaeiho.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"helbad.ir"; content:"Host"; http_header; classtype:attempted-recon; sid:200017148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"helen.wang.hfhboca.finance"; content:"Host"; http_header; classtype:attempted-recon; sid:200017149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hellenic-post.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hellowanderlust.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"help-center98801.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"help.fbcasereview1000234789234.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"help.insecur.saftyalert.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"help.validation-page.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"help3y73.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"helpid.100359521897529096.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"helpmettaa.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"helpmettaa.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"helpmettacase1000.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"helpmettacase1000.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"helpmyshipping.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"helppadrestricteed.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"helppadrestricteed.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hendaklahengkau.martulangsore.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hendossvkt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"henerzerga.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"heocxhe.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200017168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"heognqclud.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"heonjzzbvl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"herbalap.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hercarresf.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"here.meship.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hertybert.rest"; content:"Host"; http_header; classtype:attempted-recon; sid:200017174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hervochapiteaux.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"heryerdeiptv.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hexdropnow.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200017177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hexgo-nfft.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200017178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hf8u99.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hfgyfhpquc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hflcxuhvbs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hfuej.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hfvthnavbl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hg5566dh.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hg5566gx.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hg87653489.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hgbrntalvl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hgcyikwacl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hgfgh-109444.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200017189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hgsgtlymml.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hgu4.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hgyyrwknly.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hhdiamond.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hhhbh.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hhipercrad.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hhmetagame.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hi9.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200017197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hick-u.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hicman00127937338.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hidden-morning-1496.on.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hifly10365.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hifly21173.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hifly27702.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hifly62556.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hifly96975.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hiflyerr2.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hiflyk47344.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hifqxvegcq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"higezuzjan.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hiippervaarejoo.myshopify.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hiippervareejoo.myshopify.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hillwig-goodrow.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"himalayansherpa.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200017213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"himbauane.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hinetbizsrvrnetworksystemhost.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200017215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hinetfeedsecurenetworkreportcentres.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200017216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hingehealths.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hiper-consulte-fatura.gq"; content:"Host"; http_header; classtype:attempted-recon; sid:200017218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hiper-faturaroriginal.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hiper-faturarprodutos.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hiper2m.taplink.ws"; content:"Host"; http_header; classtype:attempted-recon; sid:200017221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hipercard-fatura.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hiperdigital-fatura.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200017223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hipervarejo-loja.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hirshfields.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"his.uponant.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hisoftsxwnf.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hitachi-dot-encrypt-key-326708.uk.r.appspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hitman71hd-wixsite-com.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hjhhomesolutions.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hjhvfuugdt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hjilfqgaqx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hjkd.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hjkmjqpgjz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hjmnkw.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hjpywkmsnh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hjwccxvoob.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hjztlwbqym.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hkdfvsvzoy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hkjew.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hknvkqavyv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hkpbrnuzys.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hkps2l.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hkzwtnwqgg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hlulysmfdi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hm.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200017246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hmhfyritngd.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hmncsojrkf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hmnlcvcjcd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hmzl0b2af7b7eed3176e826c7a.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hmzl0b2af7b7eed3176e826c7a.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hnclkeldjx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hngbdryecq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hngq2b.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hnklubjwsg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hnlxjuekiy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hnxlatdfvp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hoatkillon.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hofenor762.temp.swtest.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200017259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hoje-temos-solucoes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"holding-energy.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200017261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"holy-brook-fe7c.set1s511135.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"holy-pine-586f.mariosa5862.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"holy-wind-f028.vgreengolf8866.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"home--banprovincia.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"home-banking-online.argentina15.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"home-lido.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"home-nft-magiceden.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200017268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"home.banprovincia.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"homesdata.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"homestayenglishschool.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200017271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"homexpector.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"homeypanel.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"honeydewnaturaldocs.1q10519ijh.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"honeypotqatar.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hongkailighting.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hongpham.com.vn"; content:"Host"; http_header; classtype:attempted-recon; sid:200017277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"honosglobalcorp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"honostkwik.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"honounced.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"honw525a.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hoopyrysolucoes.dns.army"; content:"Host"; http_header; classtype:attempted-recon; sid:200017282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hopasae.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200017283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hopeful-colden.213-226-123-64.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200017284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hopxgroup.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"horffice2003.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"horffice2003.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"horffice2004.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"horffice2004.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"horffice2007.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"horizonweighing.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"horsesmarts.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200017292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hosnbtynur.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hospitableunfitrom--verificador.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hostilnga-arubba-ita.de.cool"; content:"Host"; http_header; classtype:attempted-recon; sid:200017295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hostinga.tempurl.host"; content:"Host"; http_header; classtype:attempted-recon; sid:200017296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hostings.kilinkis.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200017297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hostnix.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200017298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hotel-pontos.gr"; content:"Host"; http_header; classtype:attempted-recon; sid:200017299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hotelbooking-saydabad-jatrabari.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hotelxcaretrivieramaya.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hothorizontalevaluation.bancactiva.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hotjarwebserverid90436971.icebergbuilder.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"houdopme.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hounbvc-c7661.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"house18.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200017306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"houseofscotland.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200017307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"houtai2.cactusverse.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200017308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"houtai2.gaagagu.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200017309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"howtomycar.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"howzxmr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hp.pichares.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hpcvsxr.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200017313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hpider.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hpls.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200017315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hpplotters.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200017316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hpuusyr2.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200017317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hpvzajxard.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hqiakyidnj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hqrurvcbyh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hraegbqipa.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hrbzrbxbvz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hrdl.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200017323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hrga.melonwoodhomes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hrkaryejyi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hrms.projects-codingbrains.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hrpaypepsico.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hrvatskaposta-hr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hryrcvvrjuck.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200017329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hscfgdnmqi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hshjzexeee.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hsrrsefrjw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hstmdo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"htkeyetuqg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"html-update-okay99.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"htoaekintu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"httpeugnerally-wixsite-com.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"httpswwwbncrficr--bndigital.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"httpswwwbncrficr--petterm1.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"httpswwwbncrficr.arelnmg.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"httpswwwbncrficr.bncr-bancobanco.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"httpswwwbncrficr.fonchoramire.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"htuuhtyxkx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"htwocnbypb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"htzgsitvul.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hublifefinancials.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"huglink.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200017347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"huifd4.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hulu-com-activate.sitey.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200017349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hulu-hulu-com-activate.sitey.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200017350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hulu.sitey.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200017351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"humanrights.mw"; content:"Host"; http_header; classtype:attempted-recon; sid:200017352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"huncho.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hunchpool.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hungryemu.build067.wpsandbox.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hungryguy.wien"; content:"Host"; http_header; classtype:attempted-recon; sid:200017356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hushighu-98371.asia"; content:"Host"; http_header; classtype:attempted-recon; sid:200017357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"husiwei8.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hutoknepper.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200017359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"huynguyen2k.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200017360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"huzagzvkpg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"huzurelektrik.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hvaxk.offatic.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hvcjocqkbh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hvct.edu.vn"; content:"Host"; http_header; classtype:attempted-recon; sid:200017365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hvcu.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hvcu.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hvevyuocsm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hvjwdntmye.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hvmrezzkjs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hvricogdku.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hvtrbpoupt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hvvxzdliay.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hvxcqqdcik.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hvzwpbbvqx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hwangtointerior.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hwclcnnjkh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hwwdpvlvzo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hwwvhdpvbt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hxcjvczwqj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hy-108491.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hydrowhales.freemint-web.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hyirts-mcfaims-wracs.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hykjbuobxn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hyknfzcvzs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hyperacesso-oficial-online.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hyperx82hdas9o.liveblog365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hypiodly-threihn-schloik.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hypnobirthinggta.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hyxcsbmlkm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hzagyentof.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hziaiaebxx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hzpkdgd2e-dgxn.lrhvacr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hzqvdervuc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hzrwguanqc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hzrzrjgqzu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hzy0wm.codesandbox.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200017397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"i-ask332.dga.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200017398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"i-auth.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200017399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"i-pages.i-pages.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"i-tps.cam"; content:"Host"; http_header; classtype:attempted-recon; sid:200017401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"i-usps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"i.violationspage.validationspege.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"i3wrne.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"i90o.32523ttew.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ia6q6k.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iagascpbfs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iahmindia.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iavrzocdfr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ib-fio-cz.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200017410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ib-nab-au.tiny.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200017411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ib.ressonalbank.co.jp.nmvsx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iberostarhotelsresorts.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ibfm.jo"; content:"Host"; http_header; classtype:attempted-recon; sid:200017414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ibiservice.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ibiza.center"; content:"Host"; http_header; classtype:attempted-recon; sid:200017416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ibjqxgmlch.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ibraibraa17.rf.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200017418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ibraibraa170.42web.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200017419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ibu.com.uy"; content:"Host"; http_header; classtype:attempted-recon; sid:200017420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ibuothjify.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ibwshqdelr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"icat.tg"; content:"Host"; http_header; classtype:attempted-recon; sid:200017423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iccis20.scrs.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200017424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iccrea-bcc.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iccu-2fa.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iccu-2fa.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iccu-a.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iccu-ie.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iccu-ie.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"icentra.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ichosenimports.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"icsconsultant.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200017433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ict.umtas.ac.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200017434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"icy-base-c058.housewin7892.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"icy-block-93df.edrees368.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"icy-wildflower-3f00.rlautobody5397.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"icyljjklkv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"id-000064updatenow.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"id-64300000-updatenow.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"id-online-info.preview-domain.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"id-usr-info.preview-domain.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"id-utenza-com.preview-domain.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"id100410556196416310231050.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"id100410556196416310231052.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"id100596210962092061.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"id100694105610961061091.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"id10096102895610922.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"id100961296156912069620.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"id100961296156912069620.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"id10096285154118510510.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"id10096285154118510511.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"id10096285154118510511.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"idavivienda.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200017454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ideissuyso.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ideomaker.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200017456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"idimaro.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200017457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"idiomas.unh.edu.pe"; content:"Host"; http_header; classtype:attempted-recon; sid:200017458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"idmsghirjg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"idobeamolax.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ids-s.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200017461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ids-sp.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200017462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ieluisfelipecenteno.edu.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iempublicschool.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ieokrwlinx.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ieor-e0e55.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ieor-e0e55.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"if2mai.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ifibybo.cluster028.hosting.ovh.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200017469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ifjsljasoz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ifjtavcljr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ifpytwihfh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iframejld.avent-media.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200017473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ifrorjoaia.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ifwpbxqfxy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ifxbdtnhsl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ig-itirazformu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"igaydsikfb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"igfavfkqxg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"igotinnovative.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"igotpgcfxm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"igqokg.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"igsolthermsolar.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"igwnfjgard.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"igxvvrfcdz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ihmbnceucd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ihpost-dispatch.9009087865.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200017487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ihpost-shopping.2323433351.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200017488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ihyfddxgvjh.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ii-z2c6nzwc7a-rj.a.run.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iiidk-b5038.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iiidk-b5038.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iiketvbumw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iiqcu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iirpssbsca.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iitauverifypy.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200017496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iitgylykwk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ijcdweybgq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ijgsr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ijsowuoqpc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ikclvbhgtd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ikdpokegrf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ilbeseq.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ils37427456.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ils37427456.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"image-apparel-solutions90389.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"imaginary-one.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200017507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"imaginaryones.win-mint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"imaginaryones.wlmints.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"imagination-academy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"imbibetechnologies.co.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200017511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"imdhxfjnma.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"immaculace.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"immediate-tropical-collard.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200017514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"imminenttechnology.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"immutable-otherside.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200017516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"imobiliaria-cardinali-com-br.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"impost-delivery.659215122111.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200017518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"impostaverifiche.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"impotsgouv-france.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"improve.bearbiscuit.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"impurediscretebellsandwhistles.efi0fo3.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"imraanhossain.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"imxwfqrcdw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"in4ou567twch.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200017525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inanhd.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inbetweeners.nfts-premint.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200017527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inc--sharefile-109598.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200017528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"incascajal.ayesi1.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"incelemede.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inchirieri-limuzinebucuresti.ro"; content:"Host"; http_header; classtype:attempted-recon; sid:200017531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inclusive.co.ke"; content:"Host"; http_header; classtype:attempted-recon; sid:200017532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"incomeviaonline.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"incredible-ganache-e54bb5.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"indexc-etc-co.fade.xanalia.com.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200017535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"indianajons.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"indigoswap.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200017537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"indmobilelegends.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"indusinn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"industrial-gt.22web.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"industrial.bihome.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"industrialinicio0i.industriainicio.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inexcellence.co.za"; content:"Host"; http_header; classtype:attempted-recon; sid:200017543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inf-clientspro.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200017544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"infallible-chaum.109-206-241-201.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200017545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"infamousunwillingsucursalvirtualbancolombia365.dimacica.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inflixty.rf.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200017547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"info-check.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"info-conto-com.preview-domain.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"info-push.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"info-sante-france.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200017551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"info-sg.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"info-sg.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"info-update-78432.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"info-update-78432.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"info.18-195-232-224.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"info.4-246-165-149.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"info.dnb.no"; content:"Host"; http_header; classtype:attempted-recon; sid:200017558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"info1226.systeme.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200017559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"info24c.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200017560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"info32jumpstr.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"infoameli-vitale.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200017562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"infocantik.my.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200017563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"infoccbr.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200017564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"infoconsocledigital.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"infoconsocledigital.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"infoinp0st.32652135151.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200017567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"infomohelnice.cz"; content:"Host"; http_header; classtype:attempted-recon; sid:200017568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inform-01.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inform-01.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"informations.recovery.confiryourpage.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"informationsameli.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200017572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"informationtaxcase.page.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200017573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"informativaassistenzaconto.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"informativasistemaconto.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"informazionidaticliente.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"infos-dkb.de.cool"; content:"Host"; http_header; classtype:attempted-recon; sid:200017577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"infos-novobanco.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"infosdiciembre-oportunidadunica.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"infoservicesattauth.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"infoservicesattauth.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"infoverifyusps.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ingenia-design-0utl00k-storage.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ingenia-design-0utl00k-storage.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ingfinan.co.za"; content:"Host"; http_header; classtype:attempted-recon; sid:200017585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ingreestuyaa2213.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200017586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ingreestuyphet3654.0hi.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200017587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ingresasitio.jaifern2742.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ingresopersona.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ingresoseguro.jobrefrigeracao.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200017590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inicex.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iniciar-bakwepb.pichititcha.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"initialize-web.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200017593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"initialredwoodtitle.retool.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inkdzfdzee.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inmobiliariaalfa.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200017596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"innovation-evotik.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inofr.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inofrakotno.6b8wn1.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200017599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inofrakotno.fgfhakl.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200017600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inofrakotno.yjcatpj.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200017601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inp0st-pay-site.650000000002.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200017602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inp0stinfo-product.4533321786.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200017603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inpost-pl-pacid273jks.tankle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inpost-pl-xz5512.lakshmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inpost-pl-xz5512.rokus.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200017606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inpost-pl-zai.accept8145.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200017607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inpost-polska-po.order9988.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200017608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inpost-rghl.2584902.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200017609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inpost.order525.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200017610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inps-ep.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inquiry-package-usps.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"insetti.com.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200017613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inshchckdomainmailk.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inshchckdomainmaill.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"insider-store-loja.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"insightofatt-mail.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"insigniahighlife.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inspection-referentiel2022.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inspection-referentiel2022.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"instagram-community.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200017621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"instagram-help-23.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200017622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"instagram.com.bedrijfmaju.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"instagram.izeroday.ir"; content:"Host"; http_header; classtype:attempted-recon; sid:200017624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"instagram.orvilleyang.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"instagram.tempurl.co.il"; content:"Host"; http_header; classtype:attempted-recon; sid:200017626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"installdapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"instantfixedfloat.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"insurancetrader.gr"; content:"Host"; http_header; classtype:attempted-recon; sid:200017629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"int3eractivebrokers.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inta.gob.ni"; content:"Host"; http_header; classtype:attempted-recon; sid:200017631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"integratedcom.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200017632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"intel-home-l0gin-gerenciador-online.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"intelli-patterns-12e9.jiyeg28043.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"interactivebrokers.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200017635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"interactivebrokrers.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"interactivebrolkers.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"interadtivebrokers.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"interbank-ingresa.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"interbank-personas.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"interbankempresahomeweb.gemsaweb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"intercitycircle.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"interclean.com.pk"; content:"Host"; http_header; classtype:attempted-recon; sid:200017643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"intercurrent-orname.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"internalaudit.bu.ac.th"; content:"Host"; http_header; classtype:attempted-recon; sid:200017645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"internalrevenueus.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"international-c.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200017647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"interne-haut.at"; content:"Host"; http_header; classtype:attempted-recon; sid:200017648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"internetprofitscoaching.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"internetservicetech.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"internetsubev2-acikdeniz-com.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200017651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"interspar.at"; content:"Host"; http_header; classtype:attempted-recon; sid:200017652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"intersucursalnenbancolobia.clavedinami365.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"interwebcancadigitalper.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inthe-etc.co-jp.bous.com.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200017655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"intitzipqs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"intl-ppyal-securedata.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200017657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"intmanage-accountwp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"intrapump.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"investecfinance.co.tz"; content:"Host"; http_header; classtype:attempted-recon; sid:200017660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"invisiblefriendsio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"invoice-production.chat-verify.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"invoice-readers.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inzizi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"io-kub.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200017665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"io-magic-eden-yo.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"io-opensea.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200017667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"io-opensea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"io-opensea.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200017669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"io-team.support"; content:"Host"; http_header; classtype:attempted-recon; sid:200017670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"io89.ty65hg.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ioiokvscfo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ionicatour.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ionos-mein.webmail.de.flick-fix.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200017674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ionos.com.clededavid.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ionos.com.jclfirestoppros.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ionosionos3.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ionosionos3.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ioocsrare.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iooiehzhyr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ioueo.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iouo-b38a9.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iouo-b38a9.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ipanemaaustraliaoutlet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ipdrryyloq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ipdzuplayv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ipfs-fleek-co.translate.goog"; content:"Host"; http_header; classtype:attempted-recon; sid:200017687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ipfs4qyyhyzqyoqrz-wcq8hgj7sf3nkj8uyyrh.us-east-1.linodeobjects.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ipixacademy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ipko-login.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ipkobiz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iplogger.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200017692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ipvpn055172.netvigator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iqesc.needile.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200017694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iqvqcqrukg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ir.gl"; content:"Host"; http_header; classtype:attempted-recon; sid:200017696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"irahn.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200017697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ircmhealth.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ircvnhfbfw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ireer-83ebf.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ireer-83ebf.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"irelandsissuesmagazine.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"irev.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200017703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"irritatingraggedsystemsoftware.mudobancombia.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"irs-federal-taxus-information.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"irs.primeramfbank.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"is292-express.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"is292-express.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"isaacanicama.pe"; content:"Host"; http_header; classtype:attempted-recon; sid:200017709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"isabelle0000000010.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"isabelle0000000011.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"isabelle0000000011.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"isabelle000000004.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"isabelle000000005.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"isabelle000000008.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"isabelle000000009.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ishr.cm"; content:"Host"; http_header; classtype:attempted-recon; sid:200017717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"islampurpaurashava.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"islavacances.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ismery.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"isrzqzgijw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"istonline.org.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200017722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"isxykfokg84r.martincaldeyro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"it-europe564598-com.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"it-shein.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200017725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"it-shein.store"; content:"Host"; http_header; classtype:attempted-recon; sid:200017726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"it.18-119-137-111.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ita-val.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200017728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itaasis.atlasdida.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itaewonclassinc4.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"italuu.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200017731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"italywinemarket.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itapasupdfre00.is-great.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200017733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itau-seguro-paraguay05325.paraguayitau0.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itau.conectcar.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itauns--itauns.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itauparaguay.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200017737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itaupyltdaa.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200017738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itaupysecurei.byethost4.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itaupysecurel.byethost7.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itaupysecuret.byethost8.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itausecureacount.byethost32.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itausecurepy.byethost31.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itausecurepy.byethost9.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itauseguridad.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200017745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itaususa.certeste.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itauvalidar55.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200017747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itdounmowf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"items-check.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ithfgqftgw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itqsvabpzj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itrrit-192f5.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itrrit-192f5.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itsmdshahin.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200017754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itsme-be-d12d7.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itsme-be-d12d7.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itsme-carte-730f8.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itsssl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itsweblook.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itua-informa-seguridad04214.itauseguro0.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iuaysda98.sciaudsbi.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iuegnkqzas.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iurl.la"; content:"Host"; http_header; classtype:attempted-recon; sid:200017763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iuui-22021.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iuui-22021.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200017765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ivaanwkhev.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ivakgvbczm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ivfcentreinindia.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ivhosqznhy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iviewing.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200017770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iwbbvjpxoj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iwkszmwtbq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iwnfeqxuje.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iwocsvsisd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iwryikehqh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iwurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iwwwwvhutl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ixmluazawx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ixomqdhxsf.cfolks.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200017779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iybwzuvmyh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iyfnxsqlut.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iykhgknyup.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iyyytlsxhh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"izgkrouphq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"izmirtekhaber.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"j0ccxz.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200017786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"j92j--y78y.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200017787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jabvylmsnz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jacksoncountytalenthub.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jacobliston.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jacobsdriscoll.com.aquaticperformancesolutions.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jaduavas.the-minting.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jajaja2121.byethost31.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jalta-jp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jam-023d.gitlab.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200017795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"james8.aidaform.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jamieversusrigo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jaosing.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"japan-login-amozomsafety-prime.cloudns.ph"; content:"Host"; http_header; classtype:attempted-recon; sid:200017799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"japan-smbcbank.bgpbxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"japan-smbcbank.cdlolk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"japan-smbcbank.dfxjyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"japan-smbcbank.exrlsr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"japan-smbcbank.eykdya.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"japan-smbcbank.hfjeog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"japan-smbcbank.hiwxjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"japan-smbcbank.iomggi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"japan-smbcbank.jusycj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"japan-smbcbank.kwuiub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"japan-smbcbank.vcktda.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"japan-smbcbank.voypzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"japan.netbkjp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jasa-bg-kakon-keman-aj-45676748767.web.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200017813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jaspogifya.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jatiroyom.desa.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200017815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jaybbcdkyz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jbagoqhspv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jbjhsrgbhj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jbr3.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200017819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jbwhpzrbnb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jbwmdypcac.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200017821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseccea.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acacseeeea.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascceaaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200017999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acascmeaaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.acaseeeaaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.accscsneiaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscceoaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmeoaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacscmesaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoacseeeoaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascceoaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoasccesaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmeoaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoascmesaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeeoaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aoaseeesaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocscsneisa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.aocsesneisa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeccea.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceeeeea.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaceesnea.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaecceaaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaeeeeaaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200018999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.ascaesneaaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaecceaaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeccesaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeeaaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaeeeesaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesneaaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.asoaesnesaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccceeaaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacccesaaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaccecceea.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceccesa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeeea.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceeeesa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacceoseea.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeeeaaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaceeesaaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacoseeaaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esacosesaaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaecceesaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeccesoaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200019999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeeesaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeeeesoaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeoseesaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.esaeosesoaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceccesoaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceeeesoaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.saceosesoaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sccosneisaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.scecsneiesa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceesneiesa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.sceosneiesa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacecceaaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soaceeeeaaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soacesneaaa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.dpmjmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socecsneisa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.soceesneisa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.aohjoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.aqjumi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.btksps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.ckbgqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.cwtqgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.cxksxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.epfran.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.fynbrb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.fznzia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.gatmao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.gtpzam.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.hgodae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.hxdmaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.hxfkib.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.igyoxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.ioukrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.iskwkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.jdidcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.jerhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.kgbmvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.kzytvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.liohdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.lklftx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.nfcruf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.nqshtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.nqydyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.ntcivu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.ofapuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.okkluc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.pscbcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.ptflkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.pvevhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.pwrppx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.qumkhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.rmefse.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.szdatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.tbzepi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.trloxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.txnrdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.ucaomn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.uovtkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.uthgrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.xdytug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.xfrhbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.xpffml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.xvtqgm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.yxfzox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.zqplva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcb-co-jp.socessneisa.zwjolc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcbhzonrjr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcbkeqalla.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jceska.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcfdeqm.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200020800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jci.tuenlacecristiano.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jckfirs.punctulcentral.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jckinser6.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jcxjfyphpz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jdhtlycqoy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jdliuxlmmy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jdvsj-ebff2.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200020807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jdydjusjsgfs.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jdyqimocpc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jefferies8.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jeffworld.llmint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jeftgmwxea.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jejeslebew758.dnsme.eu.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jenny-fcc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jeoxmfmpwn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jessicamotleycreativeco.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jetser-electrical-supply.business.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200020817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jett.gator.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200020818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jeweled-marred-cartoon.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200020819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jexhelp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jezykqqgun.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jfdg.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jflkp.csb.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200020823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jforgotum.lt.emlnk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jghjasfxjahxgkvy.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200020825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jhattorney.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jhcexumvre.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jhcifdzbhs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jhdij.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jhgrtyoliutry.liveblog365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jhgsdkjhkdswjwet.cloudns.nz"; content:"Host"; http_header; classtype:attempted-recon; sid:200020831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jhgvhh.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jhlcvcoull.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jhlwnjqhwu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jhsvalbvs.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200020835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jicontrolsnc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jicqtoxikb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jii.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200020838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jikapremny.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jilcp.inputgiant.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jindushebei.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jinmer6465.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jio.network"; content:"Host"; http_header; classtype:attempted-recon; sid:200020843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jiolaptop.foxind.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200020844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jiomnelulv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jiopaymentbank.co.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200020846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jiosms.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200020847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jiotools.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jira.incomm.customer.portal.alinaofficial.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200020849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jira.incomm.workspace.adp.mahamesin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jirxovtcmo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jiwonkim.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jiwwbonnab.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jjeocidjln.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jjjeee-2d309.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jjnekblygj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jjwkfvxmfa.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jjzxxfycml.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jkheyoftui.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jkhjhjkjk.herokuapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jku89.ty65.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200020861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jkuhaxlmav.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jlghksovwx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jlpsvqixyo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jmecumljkh.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jmfonhercq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jmmzii.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200020867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jmqkxsslfl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jmqltzkjbf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jncoser.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200020870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jnfeatjn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jnfvt.downlittle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jnnmrqymzy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jnp0st-shopping.4657642324.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200020874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jnpoststore.5465434452.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200020875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jnpoyx.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200020876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jnsudawhcj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jobsyt.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jocatlneut.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"joecamera.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200020880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"joefoxphoto.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200020881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"john-ashley.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200020882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"johnxxxxxxxx10.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"johnxxxxxxxx11.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"johnxxxxxxxx12.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"johnxxxxxxxx13.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"johnxxxxxxxx13.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200020887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"johnxxxxxxxx8.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"join-puretap.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"joinevent-tesla.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200020890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jojojoyo.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jomac-ksa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jomilafv.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jorgeibarra.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200020894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jornadaeh.historia.ufrj.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200020895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jornadasdoctoralescmn.es"; content:"Host"; http_header; classtype:attempted-recon; sid:200020896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jorrrspxss.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jovanelectrical.co.ke"; content:"Host"; http_header; classtype:attempted-recon; sid:200020898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jow-japan.or.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200020899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jowi-foundation.co.ke"; content:"Host"; http_header; classtype:attempted-recon; sid:200020900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jp-hase.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200020901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jp-idraknteoinof.ykxtqlx.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200020902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jp-mercarli.ozme7k.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200020903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jp-raknteoinof.adzhihu.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200020904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jp.postj1bpban.club"; content:"Host"; http_header; classtype:attempted-recon; sid:200020905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jp.siozzs1jbs.club"; content:"Host"; http_header; classtype:attempted-recon; sid:200020906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jpeylrzzro.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jpmc-unification-uat.eventfarm.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jpmorgan-index.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jpmorgan-index.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200020910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jpmorgan-sign.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jpohauvwkd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jporsfmuxi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jqq5.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jqtrndbvsr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jrkjpelpni.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"js.com.tr"; content:"Host"; http_header; classtype:attempted-recon; sid:200020917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jschen.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jsdeatmbge.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jskmichris000011.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jskmichris00002.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jskmichris00004.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200020922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jskmichris00009.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200020923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jsmjhjqrrf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jsxbxgxvbs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jsxounairr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jsyafsirdc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jtfe.scendo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200020928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jtfkrtprlg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jtkphpwylh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jtobdnamzf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jttetunxlp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jttfjshzmj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jtxkgkdxxr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jtyrg.tl1sc905y2.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200020935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jtyzbdfkwj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ju-109060.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"juanesteba.xiaopangkj.space"; content:"Host"; http_header; classtype:attempted-recon; sid:200020938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"judithyoungreviews.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"juegoslee.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jufh87-9jy7.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jufh87-9jy7.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200020942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jukuq-107763.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"juliegr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"juliolu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"june.document-project-list.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200020946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"juninanitmasimi.masinimialia.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200020947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"juokzncsea.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"juqjphwwrk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"juridicoqueiroz.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200020950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"just-spotless-linseed.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200020951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"justerclongre.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200020952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"justsayingbro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jutyuaye378ahsd.liveblog365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"juwnylmulm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jvggmjqigm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jvklkkkwjv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jvustcwmdq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jwngslesgy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jwpjnrpnec.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jwpxlbckyr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jwvlrpcavk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jxoykxmycf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jxqjnbbmfl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jxwqujjdho.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jyeue43rm95p.clickfunnels.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jyvumuu3.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200020967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jyxzzslvwz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jz2bab.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200020969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jzajpnygij.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jzbhyxfykc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jzdqeoekwb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"k.axsct.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200020973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"k3ja6d.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200020974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"k5k9xz.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200020975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"k87k--f35f.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200020976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kacofinance.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200020977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kadickintegrated.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kafkasariotel.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kaharaerad.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200020980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kahleenproptery-7204.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kahleenproptery-7204.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200020982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kaibun.300000.ch"; content:"Host"; http_header; classtype:attempted-recon; sid:200020983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kaijukingz.us-premint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kaijukingznfts.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200020985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kaishbazaar.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kajqhfhddr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kaklkoiwoj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200020988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kakmnezarabotat.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200020989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kakunin.azoi-0xnzoan.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200020990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kakunin.azzu-moocarn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200020991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kakunin.postj1bpban.club"; content:"Host"; http_header; classtype:attempted-recon; sid:200020992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kakunin.sai1socjp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200020993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kalm-llc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kampanya-iade-online-bizde-form-com.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200020995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kangabooking.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kankokugo-benkyou.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200020997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karabasan-mint.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200020998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karafuuru.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200020999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kardiologiebadkissingen.clickfunnels.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx1.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx10.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx11.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx14.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx15.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx15.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx18.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx18.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx2.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx2.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx21.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx21.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx22.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx23.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx23.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx24.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx26.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx26.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx27.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx28.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx29.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx29.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx3.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx30.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx30.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx36.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx42.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx43.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx44.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx44.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx45.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx46.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx47.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx48.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx49.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx51.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx53.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx53.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx56.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx56.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx57.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx57.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx58.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx58.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx6.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx61.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx61.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx7.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx9.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karenxxxxxxxxxx9.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kargonova.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karlafrias.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karllagfr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karmaeating.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"karwa.apk.dog"; content:"Host"; http_header; classtype:attempted-recon; sid:200021055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kasba.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200021056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"katabitc.go.ug"; content:"Host"; http_header; classtype:attempted-recon; sid:200021057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"katalin.dioszegi.melonwoodhomes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kaz2z6.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kbaredesigns.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kbeikmislr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kbfvjozkyk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kbmjczbgtv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kbrhslanknciksksn.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kbyqiyvjqt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kchiku.s23.xrea.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kchsijqwyg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kcjinjebgc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kcmijbxihh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kcpwr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kcrslwhgjt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kdbtwufrxy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kdcjhuhran.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kdjgjqelbo.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kdlscaffolding.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200021075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kdnhnrggys.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kdxzlujyrs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"keadaancus.topijerami.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kecc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kecmanijada.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"keen-albattani.31-192-232-3.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200021081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kek-technik.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kelly-workspace.group.iicxp.lab.benwerren.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200021083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kelurahanmanggahang.bandungkab.go.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200021084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kemlidarti.flazio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kempenbedrijfsvloeren.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kenalred.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kent19.tv"; content:"Host"; http_header; classtype:attempted-recon; sid:200021088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"keqghymiop.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ketccfgxyd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kezlytpznf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kf-p.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200021092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kfdkj-82e11.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kfdkj-82e11.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kfhaskfhaskjf.ljafhskjfhakjsf.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200021095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kfhfyzsldz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kfhqcocqcs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kfomkyhmzj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kfuzfrfvhm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kfzdvwtjcq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kg573k.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kgdmwoe4.d1qm02x7rpouzo.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kghtxcriho.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kgkfocwfqg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kgrsyezwdl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"khalidouhdane.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kharitiagold.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"khgjassdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200021108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"khjshamsxj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"khonj.fronten.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200021110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"khorge1.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"khvbrmcwcg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kiawu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kiba.tools"; content:"Host"; http_header; classtype:attempted-recon; sid:200021114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kicksmandu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kicplheztu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kiddieskornerhair.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kiemu-28132.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kieub-vougy-cyclopt.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kikoaltoeinteriors.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kil.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kilokilo.buzz"; content:"Host"; http_header; classtype:attempted-recon; sid:200021122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kimcapoeira.sa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kingdata-defi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kingj73664liv.hbinging.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200021125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kingsleypater.rest"; content:"Host"; http_header; classtype:attempted-recon; sid:200021126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kiorrsfqss.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kirliancameras.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kishu.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200021129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kishuverse.kishu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kissapps.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200021131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kissmyball.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kitaro.pre-mint.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200021133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kithocivilengineering.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kitmarketingdigital.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200021135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kjhkhkhkhkhkhkhkhkhkj.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kjhkhkhkhkhkhkhkhkhkj.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kjiiiuznbs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kjsrztzndt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kk3lsx.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kkksod.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kkksod.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kklxyyxpcd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kktdkxqdqd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kl99.q23r.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200021145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"klddf-26274.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"klientin-lieferung-paket.healingtobehappy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"klk898.ty65.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200021148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kllylxxjih.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"klmediamachine.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"klunn-mccaik-qiours.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"klxjxrxupw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"klzsufdbwb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kmct.edu.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200021154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kmctayurvedacollege.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kml8rfjulbusinessissues12421905883pagerestricted.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kmrntnflxc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"knjzsfdakr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"knndjyqpgi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"knottyimmediatesysadmin.porepoaperap.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200021160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"knowingeffectiveresource.bancoprovinar.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200021161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"knzfvleouz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ko-bitflyer.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"koalaagencynfft.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200021164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kodera.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200021165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"koerich-c-empresarial.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kognos.com.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200021167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kolping-ox.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200021168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"komijbcuej.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kone-ali123-mon-site-web-cheetah-5.cheetah.builderall.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"konfirmasifb2022.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kontostand-verifizieren.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kookuhuhhyyg.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"koqxejfady.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kornienk0.imgix.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200021175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"korrektbel.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200021176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"korsahlaw.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kosen-club.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"koteng.odoo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"koye.enter-mint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"koypes.gr"; content:"Host"; http_header; classtype:attempted-recon; sid:200021181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kphpjnrjlf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kpseivbdvy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kpyrqqsixs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kr-bithumb.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kr-bitkub.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"krakendaytradings.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"krakenprowallet.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200021188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"krameractuaries.co.za"; content:"Host"; http_header; classtype:attempted-recon; sid:200021189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"krbkuhcmki.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kreativindia.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200021191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kredit-consulting.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200021192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"krimshdgs-76787.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"krimshdgs-76787.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"krrl8e.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"krs-mail.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"krstcvxzlm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kryptorianft.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ks-fcu.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ks-fcu.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ksap.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ksbrxsuhca.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ksmoura.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200021203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kso-bwbank-de-kartenservice.ameeradesign.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ksobwbank-portal.techs4you.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200021205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ksojhpxhch.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kspsejahteramasuk.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ksxowedmlf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ktgxegzy.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200021209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kubncwqjqx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kuchkuchnights.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kucoin-auth.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kucoinxxpool.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kudsvxqbzw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kulgn.weblium.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200021215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kulinersuksesinovatif.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kunacrest.ivan-itservices.ro"; content:"Host"; http_header; classtype:attempted-recon; sid:200021217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kundenservice-html-okayupdate.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kundenservice-html-okayupdate.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kundenservice-okayupdate2022.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kundenservice-okayupdate2022.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kuronekoyamato.blackcatexpedition.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200021222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kuronekoyamato.otsuk14.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200021223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kuuuuu455.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kuwait-trck.websitepro.hosting"; content:"Host"; http_header; classtype:attempted-recon; sid:200021225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kuyhaa-me.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200021226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kvcxtxezgg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kvlxjn.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kw4-102210.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kwjwwiihhj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kwourllgqf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kxkcdjozlr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kxqzuvsghx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kyfnbpqjeb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kyklo.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200021235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kyleosburn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kyrlpaknkx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kyuhr.h90euwyt.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200021238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kyuhr.w7euw53.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200021239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kz-finance.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200021240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kzhezwokqt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kzpsxcwjvm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kzruxyaavk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kzuchetxdi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"l0g0n-1654546-ve.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200021245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"l0gin-365.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"labanque-postale-9e516.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"labanque-postale-9e516.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"laboroflovecommunityhouse.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lacqqqdcab.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"laglorietafp.com.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200021251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"laguiamundial.com.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200021252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lagurrhgfd.uytsf66.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200021253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"laitwerjxf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lakemucui.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200021255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lakeportsecretary.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lakixxaxi.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200021257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lakossagi-mkb-hu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lalkitaab.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lamagraconsulting.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lamegacapital.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"landbankiaccess.xxl.lc"; content:"Host"; http_header; classtype:attempted-recon; sid:200021262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"landing.email"; content:"Host"; http_header; classtype:attempted-recon; sid:200021263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lanmining.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lanuevarifa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lapacupatubrutacauru.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200021266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lapoderosabrujadelamor.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"larbatologistics.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"larbbmvgnx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"larvalads.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200021270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lasananucas.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200021271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"laser.trixeur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200021272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lasyaja.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200021273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"latdjofqwl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"late-haze3a7.q79jkl81.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"late-rice-0fc8.regan21.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"late-sun-545c.cruisecontrol1002473358.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"latinotravel.cz"; content:"Host"; http_header; classtype:attempted-recon; sid:200021278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"latitude-challenge.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200021279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"latvia-pasts.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"latvia-pasts.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"laubros.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"launchapp.sale"; content:"Host"; http_header; classtype:attempted-recon; sid:200021283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"launchify360special.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"launchmynft.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200021285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"launchpad.marketmaking.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200021286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lavantatemizleme.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"layerzero-labs.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200021288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"layman0296.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lazyapeyachtclub.mint-starts.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lbanca-porlnternltlnterlbank.apr0bad0tuprestamit0.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200021291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lbanca-porlnternltlnterlbank.clienteprefe-renciallbk.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200021292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lbancalnterbank-porinternelt.financiatupres-tamoperu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200021293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lbanking.dkb.de.smauditoresyconsultores.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lbanquepostalecerticplusysi.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lbazgqcgpv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lbb-connect.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lbb-connect.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lbclivraison.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200021299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lbfqfyltkp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lbkllirmzt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lbpi-update.com.uberaddis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lbpiaccess.jzta.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lbtcgjpysn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lbtvavzpup.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lbugwejsmq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lchcrbumjt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lctsqamsvq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lcxvfxoiyh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ldev.ir"; content:"Host"; http_header; classtype:attempted-recon; sid:200021310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ldkojrtuup.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ldmnxobjht.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ldnpxvovdb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ldp-diepost-ch.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"le-diablotin-rouen.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"le-site-web-de-configziggonl.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"le-site-web-de-postlu1.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"leadingmortifiedbits.fritesartois.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200021318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"leadspro.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200021319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"leafblowerguides.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"leafyclutteredqueryplan.col0238.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200021321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"leapshch.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lear-corps.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"learncricut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200021324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"leassetlaw.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lebastionclub.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"leblancbrothers.leblancbrothers.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"leboncoinn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"leboncoinsecurite.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200021329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"leboncoinsrp.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200021330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"leccaagirz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lecwwig.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200021332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ledger-liveapp.ledger-live-desktop.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200021333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"legal-boutique.ingeatel.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"legea196.ro"; content:"Host"; http_header; classtype:attempted-recon; sid:200021335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"leggatlake.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lehardrrils.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lekomosakioa.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"leocarpetcare.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"leparfaitwedding.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"level.playgamestocaslooo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"leviluiza.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lew.la"; content:"Host"; http_header; classtype:attempted-recon; sid:200021343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lexcellenceformation.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200021344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lexy.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lfkffoqnxv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lfksnalsdnlasdjl.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200021347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lfunundxab.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lfuvqtfqfe.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lg-fast.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200021350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lg-onecom-io.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lgebvdifgn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lgervgfiwa.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lgih.scendo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200021354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lgpihyelxc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lgxrtfukel.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"liabovblpu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"libo.fi"; content:"Host"; http_header; classtype:attempted-recon; sid:200021358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"library.polkastqrtter.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"licon400.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lida-fi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lido-fi-staking.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lidofieth.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lidosr.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200021364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lidostakingfi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lienquan.garenia.vn"; content:"Host"; http_header; classtype:attempted-recon; sid:200021366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"liff-gateway.lineml.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200021367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"light-office.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lightequine.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ligneauthenpostale.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ligneauthenpostale.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"liii.ink"; content:"Host"; http_header; classtype:attempted-recon; sid:200021372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"like.servety.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200021373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lilekizkmp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lilheroes.claim-mint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lilheroes.winner-mint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"limit-orders-v2.onrender.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"limo.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200021378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lin38e.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200021379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"linaestellee00001.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"linaestellee000010.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"linaestellee00005.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"linaestellee00008.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"linaestellee00009.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"linaestellee00009.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"linea20208725.centro200202265.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200021386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lingering-sun-f560.servicedeck.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lingering-violet-9e6f.cjoumm59.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"linio.applytojob.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"link.gmreg5.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200021390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"link.gy"; content:"Host"; http_header; classtype:attempted-recon; sid:200021391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"linkclickcounter.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"linkin-etc.co-jp.yujiayun.com.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200021393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"linkler.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200021394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lionsgate.myprintdesk.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200021395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"liquibill.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"list.setoon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200021397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"literarebooksinternational.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200021398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"little-math-4e76.m-santiago3317.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"little-mode-47dc.85nm78ho.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"little-poetry-98df.m-aolupdateemail.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"little-sun-c135.woodedrose.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"little-wood-23ca.abssupdatedlogin.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"littlesherlockllc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"littlesnow.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"liusanchuan.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200021406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"live-01-38b04.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"live-online3.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"live-reports.herokuapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"live-site.hopto.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200021410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"live.assetsrestoreapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"live.outlook17.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"live.outlook22.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"live0utlook.liveblog365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"livelobbpontos.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200021415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lively-mountain-55a9.marines22.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lively.marbauttulo.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"livesofasuna.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200021418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"livmlvilco.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"livraria-bsm.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"livraria-catolica-caritatem.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"livraria-do-arco-da-velha.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"livrariabsmt.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"livrariacaritatem.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"livrariacoads.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"livrariadeleitura.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"livrariadonikolass.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"livrariaeurekac.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"livrariamandarinac.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"livrariap-garcia.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lizspiller.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lizziguerra.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lj-101718.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lj2qud.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ljjz0pzy1w.trailmagic.org."; content:"Host"; http_header; classtype:attempted-recon; sid:200021435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ljpefppvgq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lkansdwxz.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lkeal.ctanpaa.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200021438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lkjgfooiuytrxfghbti.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lkjmrbhtsd.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lkjwjjivvw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lknczp.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lksteyluks.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lkvjwlykld.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lkvvrlgdjx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lkxzoot.lokujh.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200021446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"llcdtate.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"llgeubdxkj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lli34b2.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"llilll.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lllubzjihy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lloydsbank.secure-personal-device-login.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"llrire.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"llrire.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lluvias.tv"; content:"Host"; http_header; classtype:attempted-recon; sid:200021455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"llyhugx.cluster028.hosting.ovh.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200021456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lm98qw.th00nm.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200021457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lmbjtbapki.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lmfvzvcqip.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lmmutabie.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lmo.ewe6.monster"; content:"Host"; http_header; classtype:attempted-recon; sid:200021461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lmoaouh.uscompactvenuscompac.community"; content:"Host"; http_header; classtype:attempted-recon; sid:200021462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lmomicronlonesmmiucor-7hdnkshdmicronlo-lologdh.jahin.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lms.kedokteran.ums.ac.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200021464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lmufjh.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lmy.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200021466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lnfligasnormmaspy.paraguaaysa.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200021467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lng.es-lngdlrect.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lnjoptqugf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lnqqmwcwya.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lnvntrwmeo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lnvoice-pcu-gc.ca"; content:"Host"; http_header; classtype:attempted-recon; sid:200021472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"load4565765.blob.core.windows.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200021473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loadedoffersonline.com.ng"; content:"Host"; http_header; classtype:attempted-recon; sid:200021474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lobgojosuc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lobnasasasa.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"local-helpdesk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"localizzaposizionesospesa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"localso.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"locksmith-4less.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200021480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"locus.shockedgoldenro.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200021481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loeqpqrvsr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"log-acc3.gq"; content:"Host"; http_header; classtype:attempted-recon; sid:200021483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"log-sk.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200021484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"log.172-173-236-87.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"log1.18-116-43-178.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"logginbanco.pitosousa1995.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200021487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-8bi7tywpwheb7tr7twjkvrwy8grv45unjfnq4pbi9s4y3.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200021488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-93cvqtscb4t0eevdag5ojhk5zl8z9qzva3bl3l7c.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200021489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-att-100.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-att-106.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-att-990.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-att-login.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200021493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-auth7xgwk169cd02i0apk8y94pth3414vh1li9chsmleobcgr.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200021494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-auth86ku4h0cizaixm9mwyy6m0b4xz5rq1salcny0i49s0i01.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200021495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-auths0m7b9u040abs8xq6yz0eyz2qz4ejw3v1wew0lpd.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200021496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-b8sx7fjkw2sby32it82zuj6d6tjz0bepshxo2c6e2ohl6.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200021497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-common-microsoftonline-s04ndcwlwi0mtk0mda2nwuyna.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-dhl-inter-bd6e96.ingress-daribow.ewp.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200021499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-ingbank.pl-id18ha7u1vaoi1batz178dzhr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-ingbank.pl-id19hqab18abh1vghja7891g.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-ipco.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-micro-drive-file-doc-view.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-micro-drive-file-share-view.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-micro-drive-online-doc-view.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-micro-drive-online-doc-view.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-micro-file-drive-folder.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-micro-file-drive-folder.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-micro-file-share-doc-view1.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-micro-power-share-file1.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-micro-power-share-file1.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-micrsoft-onedrive-signin.sansiro324wnet.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200021512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-page-103847.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-page-106660.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-review-uk.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-review-uk.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-sceen.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200021517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-wallet-polygon-technology.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login.acessocaixa-gov-br.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login.cert.info.51-103-88-124.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login.mgmt-bi.ch"; content:"Host"; http_header; classtype:attempted-recon; sid:200021521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login.miizuha-bunkes.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200021522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login.myemployeerewards.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200021523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login.xeathcliff.life"; content:"Host"; http_header; classtype:attempted-recon; sid:200021524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login1.sitelio.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200021525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loginebrou.llaveebrou.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200021526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"logininatt.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loginorangefr54822e54876245588de55878.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loginprim2.sslblindado.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loginscreen-070.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loginupdate103450.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200021531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loginupdate103453.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200021532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loginupdate103459.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200021533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"logistik.bpbd.boyolali.go.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200021534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"logmedo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"logndeyddghd-attmailbox.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200021536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"logon-review-uk.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"logon-review-uk.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"logopedieannabel.be"; content:"Host"; http_header; classtype:attempted-recon; sid:200021539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"logoun.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"logowanie-pkobp.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200021541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loja-maria-filo.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lojaaltogiro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lojabarata.sslblindado.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lojadomecanico-dam.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lojadomecanico-som.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lojas-bbv.myshopify.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lojasamericanasblackfriday.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lojasamericanaspromocao.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lojasdopedro-som.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lojasmagalu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lojasnetbrasil.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lojassantaifigeniabraz.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lojasvirtualon.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lok-iflme1.gq"; content:"Host"; http_header; classtype:attempted-recon; sid:200021555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lok.fxnet.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200021556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lomadesarrollos.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200021557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"london-gov-uk.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"london-gov-uk.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lonestarinterior.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"long-mouse-deaf.silentsunrise3109.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"long-truth-fa36.yiyahamalkers.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"longhaired-grateful-icon.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200021563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"longonlinebankgalicweb.galiciaarg1.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200021564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lookadowei.onedumb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lookatmynewphotos.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lookinqatar.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"looks-claim.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"looksrare-claim.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"looksrare.cx"; content:"Host"; http_header; classtype:attempted-recon; sid:200021570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"looksrare.org.0xb646f4fa47a16309bf603fd805ecd222a5cd.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200021571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"looksrrare.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200021572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loopedcupes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loowbo.uno"; content:"Host"; http_header; classtype:attempted-recon; sid:200021574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lopvzekrep.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lopzjpvbwr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lormrxrvag.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"los-gaming.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200021578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"losmoy.uno"; content:"Host"; http_header; classtype:attempted-recon; sid:200021579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lot-lp-x.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loteriada-urodzinowa.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200021581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lotosarcondicionado.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200021582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lottery-bingo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loudapes.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200021584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loudouni.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loufk.baur-scholz.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200021586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loveorrecost.page.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200021587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loxoxiiv.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200021588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lpcderfrwj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lpdnwqxyny.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lpdpages.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lpgknujiko.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lpgytfmrkr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lprefyffrs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lps.consciousnes-media.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lps.consciousnesmedias.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lps.consciousness-media.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lps.medias-vacation.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lps.melting-ice-advertising.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lps.nmbr-one-coffee.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lps.profit-power-online.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lps.profitpower-online.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lps.profitpwronline.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lps.profits-power-online.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lps.realgolife.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lps.spitz-space-online.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lps.sunflower-advertising.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lps.thelavandablog.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lps.thesmallanimalsolutions.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lpvh.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200021610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lpzgofbyqt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lqcsnldpwo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lregistroprestamoalinstante-solicitud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lreyllgwkz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lroqhznihf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lrvxxkhxac.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lrxqldvajp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lrzyywxvhp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lsdaeszzxsa.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200021619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lsdxztzrx.liveblog365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lsgdhhnyge.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lsjnyeyvbb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ltaueniinea.byethost11.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ltaufeitopvc.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200021624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ltcrghainq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ltqpxhpcuo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ltrhusvhll.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ltsmhalvaj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ltzpedruxs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lub-supply.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lucasrondinelli.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"luciavent.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lucky-rice-73a8.bizd134.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lueilwitzoi.qfhv5wsook-ewx3ldk9m6zq.p.temp-site.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200021634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"luettgen.qfhv5wsook-ewx3ldk9m6zq.p.temp-site.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200021635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"luisacomsorte.com.br.asterixconsultiva.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200021636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"luisgc21.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200021637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"luizalabs.swiftkanban.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lujoleasing.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lulufatur.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lust.fineee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200021641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lutonfb-proposal.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200021642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"luxtrust-updateid.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"luxtrustapp-login.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"luxury-puffpuff-974aa0.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lvhgtgerrr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lvmospage.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lvmospage.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lvwxlzmzii.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lwbvloabiz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lwjzsegopc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lwvjwnammm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lwwav2.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lxadgreqld.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lxbzzcldtm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lxdmfsment.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lydab.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lyerwtxeoh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lyfarutiwl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lyfeiohqdg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lyifcrspla.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lyonheartllc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lzbkxpnump.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lzkbbtcugs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lzpjrhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200021665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lzpkyjksuc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lzxppmdbtk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200021667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m-post.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200021668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m.ageratgc.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200021669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m.fancy-bush-cf01.marhabitas.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m.grande.melonwoodhomes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m.guardiancaption.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200021672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m.help.insecurpage.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m.licenseplates.tv"; content:"Host"; http_header; classtype:attempted-recon; sid:200021674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m.protc.safty-pege.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m.recovery.safetyacount.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m.recovery.saftypageupdate.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m.still-band-a6a6.saftyalrt.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m.super-recipe-d45d.sombodysad.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m0jydg.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m1bzz8.csb.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m24-montepio.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200021682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m24montepopt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200021683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m3agence.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m3agence.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m42club.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m4agence.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m4agence.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m4ogjd.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m73md34d--rlopez2022.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200021690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m73md34d.rlopez2022.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200021691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m9bvnr.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200021692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ma-cartevitalerenouvellement.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200021693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ma-heredia.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200021694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ma-securite-sociale.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200021695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ma2020.environmentaltechnology.com.sg"; content:"Host"; http_header; classtype:attempted-recon; sid:200021696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maabhagwatidevicollege.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maalanchnayisubah.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macartevitale.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200021699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maccesdigital.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200021700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.nsuuieds.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.yz046c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeerd.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.ahiftgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200021813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.icfpvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200021831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.igh1zc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.mnvhdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.ncbhdjei.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.tubatue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaeord.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.gzfkmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200021906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.mnvhdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.ncbhdjei.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.tubatue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaoeod.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.cpnqor.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200021978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.icfpvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200021985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.mdf7pv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200021999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesaorod.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.64i23s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.cpnqor.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200022058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.ggnxmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200022062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.gzfkmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200022065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.ksiudje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.mdf7pv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.qslbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200022084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200022095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesareod.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.cpnqor.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200022135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.ggnxmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200022142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.ksiudje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.mnvhdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.nsuuieds.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.tubatue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200022174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarerd.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.64i23s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.ggnxmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200022228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.igh1zc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.ncbhdjei.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.tubatue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarord.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.ahiftgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200022290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.icfpvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200022301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.mosjide.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.ncbhdjei.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200022330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.yz046c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesarrod.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.64i23s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.dwbjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200022379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.ncbhdjei.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.nohk5h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.nsuuieds.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.qslbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200022406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200022415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseoeod.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.cpnqor.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200022458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.dwbjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200022460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.icfpvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200022470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.mnvhdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.tubatue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.vp5lju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceseorod.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.dwbjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200022545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.gzfkmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200022552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.qslbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200022569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200022579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.yz046c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesereod.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.cpnqor.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200022621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.gzfkmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200022628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.igh1zc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.mosjide.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200022649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maceserrod.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.dwbjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200022692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.igh1zc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200022725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseerd.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.cpnqor.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200022772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.gzfkmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200022780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.mdf7pv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.ncbhdjei.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200022806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.vp5lju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macesseord.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.gzfkmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200022859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.mdf7pv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.ncbhdjei.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.nohk5h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.yz046c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrerd.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200022956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.vp5lju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macessrord.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"machina.nft-premint.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200022970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maciozine.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200022971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mackellagroup-web-dot-sharepointexcel-362410.uk.r.appspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200022972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maconsoledigital.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200022973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maconsoledigital.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200022974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macrapurpaecruariad.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200022975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200022999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.ksiudje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.qslbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200023032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200023043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.vp5lju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.yz046c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeerd.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.dwbjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200023097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.ggnxmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200023100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.mnvhdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.nsuuieds.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.tubatue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200023135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaeord.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.cpnqor.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200023189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.qslbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200023218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200023224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaoeod.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.64i23s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.ggnxmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200023274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.mnvhdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.ncbhdjei.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.qslbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200023298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200023305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsaorod.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.dwbjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200023350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.qslbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200023375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200023386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.yz046c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsareod.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.ncbhdjei.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.nsuuieds.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200023465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.vp5lju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarerd.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.mdf7pv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.nsuuieds.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.tubatue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200023545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarord.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.dwbjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200023594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.igh1zc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.ksiudje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.mdf7pv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.nohk5h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.nsuuieds.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200023631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.vp5lju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsarrod.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.ahiftgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200023671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.igh1zc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.mdf7pv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.ncbhdjei.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.tubatue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200023716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseoeod.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.gzfkmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200023772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.icfpvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200023774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.igh1zc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.tubatue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.yz046c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macseorod.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.gzfkmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200023845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.icfpvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200023847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.ncbhdjei.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.nsuuieds.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsereod.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.dwbjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200023919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.gzfkmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200023926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.igh1zc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.nsuuieds.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200023961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macserrod.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200023999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.ahiftgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200024002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.cpnqor.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200024011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.igh1zc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.ncbhdjei.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.tubatue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.yz046c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseerd.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.ahiftgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200024091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.ggnxmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200024104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.igh1zc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.mnvhdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.mosjide.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.ncbhdjei.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.yz046c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macsseord.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.cpnqor.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200024184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.icfpvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200024195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.ksiudje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.mdf7pv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200024223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.yz046c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrerd.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.64i23s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.ahiftgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200024262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.gzfkmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200024274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.nsuuieds.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.qslbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200024293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200024302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macssrord.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"macst.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200024313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"madens.com.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200024314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maderaszuhaitz.es"; content:"Host"; http_header; classtype:attempted-recon; sid:200024315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"madrid-web-home.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maestro.my.prod.dfg152.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200024317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mafigiamani.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"magaduzela.co.za"; content:"Host"; http_header; classtype:attempted-recon; sid:200024319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"magaluba.taplink.ws"; content:"Host"; http_header; classtype:attempted-recon; sid:200024320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"magaluoferta.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"magazine-acesso-aqui.website"; content:"Host"; http_header; classtype:attempted-recon; sid:200024322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"magazineamz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"magazinee-blackfriday.myshopify.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"magazinelulufaturaagora.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200024325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"magfatterceiro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maggaluconsultfacial.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"magiamgiashopee.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"magicceden-walletsmeuatelierdecroche.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"magiceden-gifts.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"magicedenlogacessosegurity.lojaintegrada.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200024331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"magicenen-nfts.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"magicvelocityrating.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"magistervirtual.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maglullu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"magnificent-pika-bb2f40.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200024336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"magyar-posta-packagetracking-aftership.geovanihardscapingservices.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maharashtra-enterprises.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mahendrachemicals.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mahikapur.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200024340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mahirarezende.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200024341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maidlier.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maiils13up.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail-100553.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200024344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail-101445.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200024345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail-102359-101660.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200024346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail-105935.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200024347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail-106407.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200024348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail-108030.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200024349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail-bitkub.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200024350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail-ovhcloud.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200024351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail-updatebox.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail-zimbra-613cea.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200024353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail.agodapools.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail.aspenku.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail.btmsoft.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200024356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail.clamps.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200024357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail.derbyde.ae"; content:"Host"; http_header; classtype:attempted-recon; sid:200024358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail.estartupchallenge-egabon.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200024359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail.info-portall.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200024360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail.magaduzela.co.za"; content:"Host"; http_header; classtype:attempted-recon; sid:200024361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail.mksc.co.tz"; content:"Host"; http_header; classtype:attempted-recon; sid:200024362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail.offce356outlook.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200024363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail.pdc13.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail.psrtoolings.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail.soarcondicionado.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail01.moncompte.f.appsuite.default.folder.ugc.umc.edu.np"; content:"Host"; http_header; classtype:attempted-recon; sid:200024367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail1.goggle.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200024368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail1.googlle.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200024369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail11.goggle.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200024370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail2.goggle.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200024371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail2.googlle.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200024372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail3.goggle.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200024373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail8.goggle.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200024374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mailadminservice789.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200024375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mailatmials.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mailatt-100197.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200024377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mailatt-107260.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200024378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mailboxservice786.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200024379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mailboxservice786.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mailboxupdate23.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200024381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maile-logn.query17297.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200024382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mailer7.onedrive0001.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200024383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mailinc.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mailingsupport.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200024385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mailplusrolerequestedprivatemailupdates.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200024386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mailservice231.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200024387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mailservice342.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200024388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mailserviceactivationverifyuyruyyuie.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mailshareview245.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mailupdate07.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200024391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mailupdate09.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200024392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mailwernamilworg.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"main.d2fi4xg6e2i3b9.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"main.d3cs831ne9kyau.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"main.dacy3s1l0yzsa.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mainagrmql2com.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200024397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maincryptofixlink.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mainetoptfixall.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mainglobaldrive.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mainlines.com.sa"; content:"Host"; http_header; classtype:attempted-recon; sid:200024401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mainnetconnectserver.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mainnetdapp.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200024403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mainnetdapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mainnetdappbot.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200024405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mainnethub.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200024406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mainsyncwallet-validate-io.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maintecth.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200024408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maintenancdigital.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maintenancdigital.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200024410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maintenancedigitalp.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maintenancedigitalp.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200024412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maiodigitalhoje010.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"majestic-kitsune-24d266.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200024414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"majesticmeads.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"majolashes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"majorimmaterialray.provincia3rd.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200024417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"majorniitro.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200024418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"majorquintessentialdatalogs.pichincha2312.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200024419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"majtjxqhmr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200024420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"make.clading.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200024421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"make.kidsure.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200024422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"makeitintowallet2022metamask.work.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200024423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"makstcs-go.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200024424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maladie-portail.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200024425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"malaprontaargentina.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200024426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"malgritrarkna.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"malloymethod.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"malogin2022.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maltapost-delivery.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mamifoundation.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200024431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mamkefu.kanuomei.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"manage-consolde.saintmarysmiddlesboro.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200024433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"manage.cisn10000062910000.center"; content:"Host"; http_header; classtype:attempted-recon; sid:200024434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"manage.hexateron.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200024435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"manageapagerepresentingacompany.art"; content:"Host"; http_header; classtype:attempted-recon; sid:200024436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"managearubas.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"managin.ca-norddefrance.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200024438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mandatorydeal.co.za"; content:"Host"; http_header; classtype:attempted-recon; sid:200024439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"map.a3rwro.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200024440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mapsa.com.pe"; content:"Host"; http_header; classtype:attempted-recon; sid:200024441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maraquitas.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200024442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"marbodalkbasecure.herokuapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"marchettienergiasolar.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200024444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"marcorals.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mariai.com.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200024446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mariannalourba.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"marinade-finance.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"markdebrand.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"market-mcsgo.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200024450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"market-vjnted.46205122222.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200024451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"market5new.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"markos.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200024453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"marks--webpersonal.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200024454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"marks.webpersonal.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200024455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"markwarton.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200024456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"marlonmedia.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200024457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"marlor.quest"; content:"Host"; http_header; classtype:attempted-recon; sid:200024458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"marpanassianghari09.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200024459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"marpanassianghari10.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200024460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"marsgoal.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200024461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"martin4dc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"marvelous-longma-26319a.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200024463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maryvanberg1199.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200024464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.64i23s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.mnvhdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascaoerd.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.cpnqor.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200024575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.igh1zc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.vp5lju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascarerd.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.gzfkmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200024660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200024685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascooerd.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.dwbjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200024733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.mnvhdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.qslbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200024763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200024772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascorerd.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascososoerd.maseccescrerd.qxkahc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200024784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mascsosoerd.masecescrerd.rkbxko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200024785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.igh1zc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.mdf7pv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.ncbhdjei.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.tubatue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.yz046c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecaoerd.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.64i23s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.ahiftgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200024900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.mnvhdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.nsuuieds.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.qslbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200024930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200024937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecarerd.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecoocsoersd.moasecsecsccrerd.gnpais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200024948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.64i23s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.ahiftgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200024979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.dwbjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200024985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.ggnxmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200024992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200024999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.tubatue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecooerd.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.64i23s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.dwbjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.nohk5h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200025108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.yz046c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masecorerd.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maseseoicsocsoersd.emsoacseueosccescrerd.gnpais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mashoorclassified.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mashraqisteel.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masterdela.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200025125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mastervisastandart.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"masun77.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"match.lookatmynewphotos.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"matchcareservice.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"materconsulltas.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200025130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mathayomspb.go.th"; content:"Host"; http_header; classtype:attempted-recon; sid:200025131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mathcastles.from-mint.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200025132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mathelin-teinture-tissus.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"matketlaceaxelndinide.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"matureflawlessaccounting245.gdfewc.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200025135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maxchodorow.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maxiroomhotelbeds.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200025137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maxmailboxupdateinfologinscreen.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200025138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maxvaloan.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maxydor.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"may-au.com.nbgrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maya.in.ua"; content:"Host"; http_header; classtype:attempted-recon; sid:200025142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mayojars.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mbal-bsl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mbarquitecto.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200025145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mbcljggatn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mbgxnjjsxz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mbi-sslwreply1.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mbtsojxgss.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mccarthyelectrical.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mcdcompany.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mchganistore.solofolio.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200025152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mcp25-vaaaa-aaaad-qeefq-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mcplabs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mcyvhdeuzp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"md-101655.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"md-72.whb.tempwebhost.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200025157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mdhuswxnza.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mdlsnwdlyq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mdsiamulislam.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200025160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mdzxpodz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"me-sys-design.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mecha-apes.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mechinchem-5cb8a.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mechinchem-5cb8a.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"medelinahealth.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mediadescent.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"medicalartsapts.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"medicare-gov-au.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"medo.world"; content:"Host"; http_header; classtype:attempted-recon; sid:200025170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"medremondreme.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"medremondreme.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meebaalbul.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meet.migrall.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meetamskku-logg-ins.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meeting-23900123090123.bitbucket.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200025176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mega-novembro-imperdivel.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"megaparseonalse.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"megzofelestes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mehmetalim.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mehtagaqar.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mei.ac"; content:"Host"; http_header; classtype:attempted-recon; sid:200025182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meier-bedachungen-solartechnik.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200025183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mein-dkb-online.eu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meine-postbank-de.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meinelieferungapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meining-bb9e3d.ingress-daribow.ewp.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200025187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meksinue.space"; content:"Host"; http_header; classtype:attempted-recon; sid:200025188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"melhoresopcao.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"melissaneub.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"melketuno.ir"; content:"Host"; http_header; classtype:attempted-recon; sid:200025191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"melloni.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200025192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"melodicancientautomatedinformationsystem.loszz2354.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200025193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meloluckyairdrop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"member-note.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"member.doyajimo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"member.garane.vn"; content:"Host"; http_header; classtype:attempted-recon; sid:200025197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"members-105900.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"members.har.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"membersiberostartheclub.com.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200025200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"membersup19.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"memorableelement.online002.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200025202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"memorial-edition.s3.sa-east-1.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"memoriamapu.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200025204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"memountainkombucha.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mendami.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mepkma.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200025207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mercado.pago.email"; content:"Host"; http_header; classtype:attempted-recon; sid:200025208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mercadopago-digital.mercadopago.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200025209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mersincambalkonustasi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"merxsks.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"merzs.aprjust.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mes-do-anopromocoes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mesdasferramentassub.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mesdejulhodepromo651.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mesdeofertasmagalu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mesixumsoq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mespromocao.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"message-creditagricole.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"message-creditagricole.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"message-webapp2242022-1311426938.cos.ap-nanjing.myqcloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"message.casei1000021611848.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"message.caseid10006197475328.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"messagecenter.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200025224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"messagerie-orange210.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"messagerie-vocale7.cleasite.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200025226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"messari.cx"; content:"Host"; http_header; classtype:attempted-recon; sid:200025227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"messenger-support-case10011.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"messenger-support-case10011.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"messenger-support-case10012.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"messenger-support-case10012.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mestertignseekjet4.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mestertignseekjet5.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mestertignseekjet6.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mestredaobra.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meta--app.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meta-business-appeal-1092707.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meta-business-appeal-1092707.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meta-business-appeal-1092761.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meta-business-appeal-1092761.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meta-business-appeal-120650562.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meta-business-appeal-12986984.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meta-business-appeal-12986984.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meta-business-settings700122.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meta-caseid.1008496109520852612.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meta-help.fbcasereview1000234789234.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meta-information-19059.herokuapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meta-page-appeal-1260005928.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meta-page-appeal-1298795124.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meta-page-appeal-16349-14749.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meta-page-appeal-16349-14749.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meta-page-appeal-42413-11614.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meta-review-details-109816137.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meta-review-details-109816137.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meta-review-details-109816645.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meta-review-details-109816645.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meta-review-details-1290004.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meta-review-details-1290004.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metabrewsociety.mint-airdrop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metacase1000530261.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metacase106524672.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metacase106524672.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metacenter-case100023532155.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metacenter-case100023532155.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metacenter-case100051231115.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metaciteacn.noisy-scene-1d5c.rcvrypegsfty.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200025266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metafbhelpp1.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metafbhelpp1.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metahelpsupp.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metahelpsupp.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metaherouniverse.freemint-airdrop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metakongz.giveaway-premint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamagna.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200025273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamakwallet.unaux.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamarkkyc.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200025275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask-1.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200025276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask-ad.infinityfreeapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask-airdrop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask-connect.surge.sh"; content:"Host"; http_header; classtype:attempted-recon; sid:200025279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask-l0gin.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask-partenaires.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask-wallet-security.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask-wallet.ajshamji.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask-wallet.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200025284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask-zendesk.rf.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200025285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask.404exist.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200025286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask.cash"; content:"Host"; http_header; classtype:attempted-recon; sid:200025287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask.cm"; content:"Host"; http_header; classtype:attempted-recon; sid:200025288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask.dsolutions.mn"; content:"Host"; http_header; classtype:attempted-recon; sid:200025289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask.en.download.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200025290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask.financial"; content:"Host"; http_header; classtype:attempted-recon; sid:200025291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask.io-services.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask.io.community-support.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200025293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask.io.merge.camostory.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask.io.merge.e-link.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200025295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask.io.merge.jfinvest-group.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask.io.merge.mgafarm.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask.io.merge.outme.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200025298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask.io.merge.pizzaoclock.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask.io.merge.wrench.ae"; content:"Host"; http_header; classtype:attempted-recon; sid:200025300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask.io.neusat.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200025301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask.ng"; content:"Host"; http_header; classtype:attempted-recon; sid:200025302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask.study"; content:"Host"; http_header; classtype:attempted-recon; sid:200025303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask004.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask1665412636.zendesk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask2.bar"; content:"Host"; http_header; classtype:attempted-recon; sid:200025306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamaskairdrop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamaskhelp.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200025308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamaskk.biz"; content:"Host"; http_header; classtype:attempted-recon; sid:200025309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamasklginofficial.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamaskmerge.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamaskreview.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamasks-validate.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamaskswaps1665412639.zendesk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamaskwallet.easy.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200025315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamaskweb.tech"; content:"Host"; http_header; classtype:attempted-recon; sid:200025316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamaskwhois.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamassklogiin.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200025318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamlask.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metanoiainfotech.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metapiex-ciaim.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metaplatforms-case10005023532.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metaplatforms-case10005023532.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metaplatforms-case1005230462.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metaplatforms-case1005230462.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metaplex-drop.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200025326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metarnesk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metaversedumondo.americommerce.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metawallonline.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metodoroupagratis.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200025330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metrograd.wl-link.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200025331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mettasmasks.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metymask.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meu-acesso-novembro-oficial.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meu-acesso-segurooutubro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mevkum.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mewscc09.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200025337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mfacebook-help-100029455684702.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mfacebook-help-100029455684702.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mfacebook.blogspot.com.cy"; content:"Host"; http_header; classtype:attempted-recon; sid:200025340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mfacebook.blogspot.lt"; content:"Host"; http_header; classtype:attempted-recon; sid:200025341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mfacebook.blogspot.rs"; content:"Host"; http_header; classtype:attempted-recon; sid:200025342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mfdvg9.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200025343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mfiglaflhu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mfvnlywuvt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mfwuypbfuh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mggxardowu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mgiezvplas.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mgldbrfjmc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mgqnjmjczl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mhbnjztzir.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mhtzpmlpfr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mhylz.ficable.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mi-neaar.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mi-sctobnk-pe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mibancocrece.com.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200025356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mibsinesx.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200025357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mic-cinautheticate.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200025358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"michaelar.mefound.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"michaele-105342.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"michaelmcintire.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"michelearris.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"miconsultaenlinea.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"micro-drive-file-share-folder.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"micro-drive-file-share-folder.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"micro-file-login-share-drive-view.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"micro-file-login-share-drive-view.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"micro-file-share-doc-view.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"micro-file-share-doc-view.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"micro-file-share-login-drive.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"micro-file-share-login-drive.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"micro-login-drive-file-share-view.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"micro-login-drive-file-share-view.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"micro-login-drive-file-shared-view.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"micro-login-drive-file-shared-view.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"micro-login-drive-one-drive-share-view.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"micro-login-drive-one-drive-share-view.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"micro-login-file-share-drive-folder.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"micro-login-file-share-drive-folder.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"micro-login-file-share-locale.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"micro-login-file-share-locale.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"micro-login-file-share-view.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"micro-login-file-share-view.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"micro50495045045.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"micro50495045045.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"microcav.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200025386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"microignore12.neocities.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"microsfotoffice86572.jogengineerin.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200025388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"microsimdigital.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200025389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"microsoffoffice365.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"microsoft-office365t.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"microsoft-outlook80059cfghjhy0089.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"microsoft2210.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"microsoft268672account.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"microsoftwebserver.mfs.gg"; content:"Host"; http_header; classtype:attempted-recon; sid:200025395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"micuenta01.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200025396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"midcoaccountnotice.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"midcoaccountnotice.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"midcoaccountsecurity.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"midcoaccountsecurity.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"midtyni.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200025401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"midwesthomesinc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"miezihubsenk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"miezuhubsenk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mif819--f8q9y.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200025405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mif819.f8q9y.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200025406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mighty-reflective-bubbler.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200025407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mijnf-o-d.onlineservicepointconnection-klantnr485948748478.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200025408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mijnsca-clientview.109-71-253-24.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200025409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mijrb.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200025410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mikaros.cz"; content:"Host"; http_header; classtype:attempted-recon; sid:200025411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"miko.montifar.com.ph"; content:"Host"; http_header; classtype:attempted-recon; sid:200025412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"milesandmoreprovider.site44.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"milk.unward.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"miller-insurance-web-dot-sharepointexcel-362410.uk.r.appspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"milwaukee8.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"milyoner.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200025417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mindbloomcounseling.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"minerella.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"minerlee.topijerami.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200025420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"minghtying.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mingming20160152.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200025422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mingsmith.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200025423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"minha-conta-netfiix.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"minhaclaronetresidencialapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mini.quartly.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mini.servion.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"minifumblingsolidstatedrive.mastervb.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200025428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"minilightbluelaboratory.oficial00.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200025429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mint-nftfree.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mint-proof.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200025431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mint.abamiworldnft.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mint.freedomapesclub.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mint.levavocevino.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200025434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mint.mdb.fund"; content:"Host"; http_header; classtype:attempted-recon; sid:200025435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mint.thugz.life"; content:"Host"; http_header; classtype:attempted-recon; sid:200025436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mintnftpunks.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200025437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mintnftworlds.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mintxen.club"; content:"Host"; http_header; classtype:attempted-recon; sid:200025439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mintylankyprofile4.jose212122e3.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200025440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mipirkalebak.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mirek.com.ua"; content:"Host"; http_header; classtype:attempted-recon; sid:200025442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mirmttrjfj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"miropftjjy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mirynuwtmg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"misaborcolombia.misabor.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200025446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"misolicitud-ibk1ibk.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200025447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mistel21.lamoro.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200025448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mistoreoz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"misty-band-34a2.bizd134.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200025450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mit-alert01a.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mit-alert01a.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mitama-mint.art"; content:"Host"; http_header; classtype:attempted-recon; sid:200025453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mitsubishi.wlmint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mitsuphrae.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"miurausa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mixbrasil.org.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200025457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mixtralina-baba14.ingress-erytho.ewp.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200025458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mizihubsak.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mizzen.com.ph"; content:"Host"; http_header; classtype:attempted-recon; sid:200025460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mjatmnzdoj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mjayme9jdg9izxixmjeydgg.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mjayme9jdg9izxiymjnyza.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mjaymu1heta1dgg.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mjaymu1hetezmtj0aa.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mjaymu1hetgym3jk.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mjaymu1hetizmtl0aa.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mjaymu1hetqymhro.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mjaymu1hetu3dgg.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mjaymu1hetuymhro.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mjaymu5vdmvtymvymji5dgg.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mjaymu5vdmvtymvymtexdgg.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mjaymuf1z3vzdde4mtf0aa.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mjaymufwcmlsmde5dgg.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mjaymup1bhk0mtf0aa.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mjaymup1bhk1mtr0aa.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mjaymup1bhkzmtn0aa.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mjaymup1bmu0mtf0aa.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mjaymup1bmuymzfzda.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mjaymuphbnvhcnkxmzv0aa.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mjaymurly2vtymvymjiyn3ro.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mjaymvnlchrlbwjlcjizmxn0.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mjcrcuvitt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mjephtwtrl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mjyada.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mkfi99gg0.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200025486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mkhjotampo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mkvacaptcha16.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200025488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mkvacaptcha6.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200025489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mkvfi09g.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200025490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mkvredirects10.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200025491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mkvredirects2.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200025492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mkvredirects6.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200025493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ml.opentraderxwe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mlaoyejwqj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mlbb-event-2022-671.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mllypjmzyj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mlmsoftmumbai.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mlog-m.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mlog-m.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mltpoebxko.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mlzuhobank.asia"; content:"Host"; http_header; classtype:attempted-recon; sid:200025502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mm-onlinepath.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mm-onlinepath.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mm88icon.bet"; content:"Host"; http_header; classtype:attempted-recon; sid:200025505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mmeraanmmsamkkslog.azurewebsites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200025506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mmetatamamks.azurewebsites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200025507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mmfg.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200025508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mmgfundservicesbank.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mmi-bltkub-ccn.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200025510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mmorpg-bonus.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mmsnoreplysms.flazio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mngeraerd.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mngrzgfntp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mnkgracingteam.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mnopbxbwav.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mnqvshpmpk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mnrzlfccvy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mnurudeen.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200025519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mnypjhay.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200025520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mobiadvanced.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200025521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mobile.meta-pages.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200025522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"moblepzisfrl.t.justns.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200025523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mobremerbrese.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"moceissxe.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mockmovecastfisheat.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"modamaxacesse.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"modelgigs.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200025528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"modernacrobaticexabyte741.proposito.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200025529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"modernbluedesign.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"modostance.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200025531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"modulo-bper.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mogotoy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"moje-alleagro.izfashion.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200025534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"moldcoop.md"; content:"Host"; http_header; classtype:attempted-recon; sid:200025535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"momautoc-bckib.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200025536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mommaramblings.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mon-easy.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mon-easy.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mon-sfr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"monapigoogle000.page.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200025541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"monarchystudio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"moncompte-labanquepostale.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"moncompte-renouvellement.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"monespaca.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"monespacevitale-assure.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"monex.sispro.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200025547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"moneyguide.finance"; content:"Host"; http_header; classtype:attempted-recon; sid:200025548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"moneyklt.coigi.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200025549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"moneyklt.ilusi.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200025550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"monicamattison.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"monihuerta.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"monirshouvo.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200025553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"monstrousslategreydegree.sucursabancolom.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200025554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"montanamotorcycletours.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"montepio-acesso.eu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"montepio-entrar.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200025557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"montepopt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"montessorinttc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"monworkpage-isafelock.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"monworkpage-isafelock.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"monyeward.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"moombeam-app.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200025563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"moonbirds.give-minting.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"moore-104470.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"moore57.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"moorei9.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mooreii.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"moorhenss.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mophrh.gov.mz"; content:"Host"; http_header; classtype:attempted-recon; sid:200025570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"more.diition.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"more.meship.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"moreheadcitychurch.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"moremi-1.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"moretimemorefun.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"morning-glitter-2e87.filedownjs.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200025576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"morning-limit-8833.on.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200025577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"morning-river-261d.img-datings.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200025578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"morries.bond"; content:"Host"; http_header; classtype:attempted-recon; sid:200025579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mortifiednano--012312.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200025580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"motionlessbigheartedcurrency--recomendacione.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200025581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"motionlesucursalblebancolombia365.clavediamnica01.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200025582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"motwiytesd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mounc.bitbucket.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200025584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mouzplf.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200025585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"moveislojinha-app.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"movementbrazz.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"movgov-vn.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"movie.bestlet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"movil.pacificow.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200025590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"movilgaliciaeminents.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"movjnlprqa.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mozbot.liv212xedas.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200025593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mozpzhtuci.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mp-login-acesso-hl.siteprofissional.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mp09qu.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200025596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mpargentino.com.ar"; content:"Host"; http_header; classtype:attempted-recon; sid:200025597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mpsienaserviziostorno.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mpwxjjujhi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mqd3lxz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mqngctxzza.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mqnvkdwktw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mrecaawning.com.my"; content:"Host"; http_header; classtype:attempted-recon; sid:200025603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mredison.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200025604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mrfugas.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200025605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mrspongy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ms-0utlook-orill-sharedrive.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ms-0utlook-orill-sharedrive.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ms-dpsgov-sharepoint-onenote-secureserver-onenote-viewfile.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ms-sharedfile-nd.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ms-sharedfile-nd.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ms365-0utl00k-docdrive.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ms365-0utl00k-docdrive.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ms365-0utl00k-eu-docdrive.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ms365-0utl00k-eu-docdrive.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"msbc.msbcoxz.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200025616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"msc-b00k-0ffice365.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"msc-b00k-0ffice365.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"msc-doelsach.at"; content:"Host"; http_header; classtype:attempted-recon; sid:200025619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"msg-biglobejp.on.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200025620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"msgg0.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"msggg.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"msiprints.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mslkf.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"msmorek.t.justns.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200025625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"msn-security-project.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"msn-security-project.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"msofficemessagescenter-1.mfs.gg"; content:"Host"; http_header; classtype:attempted-recon; sid:200025628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"msrepresentacoes.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200025629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"msrqwtrasfut.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mssolusoestek.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200025631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"msxkdkubbi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mt-bank.squizofriend.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mt-e0a64.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mt-e0a64.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mt-fhgmc.ondigitalocean.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mt.imediasolutions.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200025637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mtb-247-sec00.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mtb-247-sec00.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mtb-usa.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200025640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mtblatestversion.run.place"; content:"Host"; http_header; classtype:attempted-recon; sid:200025641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mtbolatestversion2022.work.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200025642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mtbonlinel.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mtbvverifylogin.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mtbvverifylogin.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mtconsumerscare.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mtcredbone.be"; content:"Host"; http_header; classtype:attempted-recon; sid:200025647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mtjaeaspwl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mu6uzm.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200025649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mub.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200025650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"much.migrall.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"muchange.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200025652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mudahmerajuit.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mudd.marpuasanotice.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200025654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"muddy-ayya.topijerami.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200025655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"muddy-dawn-e382.cdn-image.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200025656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"muddy-frost-ee54.henhigay285.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200025657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mueslisvvap.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mueslisvvap.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"muktijuso-korea.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"multichain-beta.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200025661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"multichain-pro.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"multichains-pro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"multicoin-beta.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200025664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"multicrypto-pro.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"multikits.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200025666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"multilaunch.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"multipad-pro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"multipad-pro.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"multiwalletconnectbot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mundodeljoyero.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"muonlh.ztsmoribas.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200025672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"murlidharrope.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"museocilea.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200025674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"musnmcke-bfa099.ingress-erytho.ewp.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200025675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mustyjuniorsystemresource.camabis.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200025676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mutanthound.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200025677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mutate.godhatesnfs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mute-fire-2a45.dealwaterpalmwe.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200025679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mutedlightgreydevicedriver.dasasdf2452.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200025680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"muwpbujqrm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"muzih0-bapk-co-jp.club"; content:"Host"; http_header; classtype:attempted-recon; sid:200025682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mvaqpiyfge.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mvcas.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mvddcyeyau.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mvpwakwnga.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mvtrccfaov.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mwawquzczu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mwezrzbzfb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mwhpwaxrfl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-aeon265e5590b868b560ebb8c921b.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-allmailer-news.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200025692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-att-inc.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-bellco.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-bithumb.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-btservice-10086267.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200025696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-business-100535-107084.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200025697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-business-100726-103936.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200025698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-business-101769-103515.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200025699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-business-103173.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200025700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-business-103210-105992.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200025701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-business-104598-100356.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200025702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-business-105546-100032.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200025703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-business-105764-109735.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200025704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-business-105908-106216.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200025705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-business-106116.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200025706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-business-106207-100668.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200025707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-business-106563-105553.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200025708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-business-107611-101497.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200025709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-business-107959-104346.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200025710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-business-109376-103281.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200025711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-business-109783-107899.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200025712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-citi-resource.bwtmumo.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200025713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-citi-rser.kamsuletri.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200025714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-citi-upd.bwtmumo.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200025715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-citiserve-res.weroloko.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200025716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-ehtrip.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-orico-co-jp.americanxoxpress.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-posta.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-posta.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-rexs-first-project.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200025721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-site-100336-107047.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-site-100404-104656.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-site-105124-105889.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-site-107916-102706.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-site-109390-100984.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200025726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-site-aol105360-103196.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200025727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-site-silahkan-konfirmas-akun-anda088.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-website1377.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my.heyform.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200025730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my.santanderapp.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200025731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my.tscubic.com.vipye.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200025732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my121-site1820-home-106648.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myaccount.hombankin.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200025734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myaccountm02133.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200025735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myappbtsecurebusiness.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200025736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myarticlefeeds.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myattcurentlyworldnew.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200025738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myattnet07038.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myattnet45879.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myattserverupdate.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200025741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myattworldnetupdate01.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200025742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myblockchainfixer.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200025743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myblog-eiat3y0hb8.live-website.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myboxxofice.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mybroadband7140002.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200025746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mycb-d07e3.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mycb-d07e3.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myccasasoencoeeb.ceosnacoen.namkdi.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200025749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myciti-res.onlineactivitieses.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200025750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myciti-serv.mytihoru.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200025751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mycurrentuspsparcel.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mydebitcardsecurity.myvnc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myee-support-id.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myelta-delivery.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myelta-paypacket.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myheartrob01.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myhrexpess.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myiccu.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myiccu.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200025760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myintegrate.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200025761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myintercommswellsu.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myislavista.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200025763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaacb.ahidtgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaacb.cobnrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaacb.cpwes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaacb.fcak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaacb.gqdqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaacb.hwnnp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaacb.nbdu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaacb.nbtgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaacb.nwvorv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaacb.pffgeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaacb.rqjns.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaacb.sxped.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaacb.umtwxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaacb.xfppjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaacb.ygfygq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaaeb.aurh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaaeb.brhtjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaaeb.dpepqq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaaeb.efuq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaaeb.hwnnp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaaeb.nvxfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaaeb.nwvorv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaaeb.pffgeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaaeb.prlhxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaaeb.rqure.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaaeb.shayla.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaaeb.xgqnix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaaeb.xjkuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaaeb.zghvtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaccb.akfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaccb.anasd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaccb.cfswnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaccb.fvdx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaccb.ipqcdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaccb.kpmvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaccb.pffgeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaccb.pqacju.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaccb.ralouz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaccb.rpwtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaccb.tgjqwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaccb.tpodqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaccb.txuhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaccb.ugmutx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaccb.wxkmp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaccb.xfppjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaccb.xvawm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaccb.zasreh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaceb.ahiatgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaceb.ahibtgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaceb.ahigtgw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaceb.bwrdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaceb.csagj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaceb.endjwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaceb.jgeta.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaceb.jhikxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaceb.kgrwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaceb.kzrdoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaceb.nbtgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaceb.nvxfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaceb.nxkka.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaceb.opdwxl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaceb.rqjns.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaceb.sagt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaceb.shayla.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaceb.tkqjzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaceb.umqpnp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjaceb.umtwxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeccb.ahibtgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeccb.ahidtgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeccb.ahigtgw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeccb.akfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeccb.anasd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeccb.cpkac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeccb.dpepqq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeccb.efuq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeccb.fvdx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeccb.gqdqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeccb.jhikxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeccb.knbau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeccb.nvxfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeccb.opdwxl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeccb.pqacju.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeccb.psbxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeccb.ralouz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeccb.rcpuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeccb.rpwtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeccb.shayla.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeccb.tlrriu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeccb.upcoww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeccb.yripv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeceb.ahiatgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeceb.bwrdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeceb.cobnrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeceb.cpkac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeceb.dmajj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeceb.fvdx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeceb.gmrap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeceb.mdzxfl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeceb.mesudz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeceb.nvxfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeceb.rcpuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeceb.rwje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeceb.tvuxev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjeceb.xvawm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoacb.ahiatgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoacb.ahidtgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoacb.anasd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoacb.htstx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoacb.jgeta.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoacb.khvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoacb.kmpmmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoacb.kyppkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoacb.mdzxfl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoacb.mqiioz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoacb.pqacju.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoacb.rcpuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoacb.rfba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoacb.tvuxev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoacb.txuhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoacb.umtwxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoacb.vjbqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoacb.vwpeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoacb.zlrjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoccb.brhtjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoccb.efuq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoccb.fcak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoccb.kpmvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoccb.nbtgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoccb.opdwxl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoccb.pqacju.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoccb.qvodqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoccb.rcpuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoccb.tpodqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoccb.txuhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoccb.umtwxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoccb.wxkmp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasceb.myjoccb.ygfygq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaccb.akfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaccb.dcxpak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaccb.hkjvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaccb.jhikxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaccb.khvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaccb.kpmvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaccb.lzuzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaccb.mdzxfl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaccb.pesuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaccb.qcoknv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaccb.rbvjzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaccb.rfba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaccb.rqure.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaccb.sagt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaccb.upcoww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaccb.usmqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaccb.vjbqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaccb.vwpeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaccb.ygfygq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaccb.zasreh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaccb.zghvtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaceb.ahiftgx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaceb.aurh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaceb.brhtjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaceb.bwrdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaceb.dmajj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaceb.mdzxfl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaceb.muol.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaceb.pqacju.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaceb.ralouz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaceb.sxped.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaceb.tvuxev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaceb.vgtmh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaceb.vwpeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaceb.zasreh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjaceb.zlrjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjoccb.ajvrrm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjoccb.anasd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjoccb.cpkac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjoccb.efuq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjoccb.fvdx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjoccb.gqdqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjoccb.kcywyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjoccb.ralouz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjoccb.rfba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjoccb.rgcvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjoccb.rqjns.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjoccb.tgjqwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjoccb.tkqjzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjoccb.tlrriu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaascsb.myjoccb.yripv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjaceb.ahiatgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjaceb.akfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjaceb.gqdqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjaceb.hwnnp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjaceb.muol.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjaceb.nxkka.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjaceb.rgcvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjaceb.rpwtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjaceb.tpodqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjaceb.ugmutx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjaceb.xfppjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjaceb.zasreh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjeceb.ahibtgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjeceb.bwrdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjeceb.cfswnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjeceb.fcak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjeceb.gmrap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjeceb.kgrwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjeceb.knbau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjeceb.kzrdoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjeceb.lzuzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjeceb.muol.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjeceb.psbxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjeceb.qcoknv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjeceb.sagt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjeceb.shayla.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjeceb.smpqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjeceb.tjliwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjeceb.tpodqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjeceb.txuhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjeceb.usmqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjeceb.vgtmh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjeceb.wsykkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjeceb.wxkmp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjeceb.xgqnix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjeceb.zghvtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjeceb.zlrjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoaeb.ahidtgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoaeb.dmajj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoaeb.dpepqq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoaeb.fcak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoaeb.fvdx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoaeb.gmrap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoaeb.kpmvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoaeb.mesudz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoaeb.pffgeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoaeb.rgcvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoaeb.rpwtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200025999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoaeb.rwje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoaeb.sagt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoaeb.tkqjzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoaeb.tpodqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoaeb.txuhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoaeb.usmqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoaeb.ygfygq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoceb.efuq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoceb.knbau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoceb.mqiioz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoceb.nbtgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoceb.oghtgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoceb.rcpuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoceb.tvuxev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoceb.txuhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoceb.umtwxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasoeb.myjoceb.zghvtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjaceb.ahibtgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjaceb.ahidtgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjaceb.cobnrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjaceb.fcak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjaceb.jhikxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjaceb.khvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjaceb.kzrdoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjaceb.opdwxl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjaceb.prlhxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjaceb.qcoknv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjaceb.rqjns.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjaceb.rqure.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjaceb.smpqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjaceb.tjliwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjaceb.xgqnix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjaceb.zasreh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjaceb.zghvtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjoceb.ahibtgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjoceb.dcxpak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjoceb.fcak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjoceb.gmrap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjoceb.jgeta.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjoceb.nbtgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjoceb.oghtgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjoceb.opdwxl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjoceb.ralouz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjoceb.smpqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjoceb.vnqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaasosb.myjoceb.zlrjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaacb.ahiatgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaacb.gmrap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaacb.ipqcdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaacb.kyppkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaacb.nbdu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaacb.nmkxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaacb.nxkka.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaacb.qcoknv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaacb.rgcvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaacb.smpqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaacb.tlrriu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaacb.vgtmh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaacb.vnqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaacb.wxkmp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaacb.xgqnix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaaeb.ahibtgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaaeb.dmajj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaaeb.fcak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaaeb.kcywyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaaeb.mdzxfl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaaeb.mesudz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaaeb.ralouz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaaeb.rqure.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaaeb.rwje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaaeb.tgjqwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaaeb.umqpnp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaaeb.ygfygq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaccb.ahiftgx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaccb.anasd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaccb.aurh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaccb.cpwes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaccb.gmrap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaccb.ipqcdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaccb.kcywyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaccb.kyppkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaccb.mdzxfl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaccb.nbtgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaccb.psbxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaccb.qcoknv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaccb.rfba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaccb.sxped.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaccb.tgjqwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaccb.wsykkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaceb.acch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaceb.anasd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaceb.dpepqq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaceb.jgeta.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaceb.nbtgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaceb.nmkxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaceb.nvxfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaceb.nxkka.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaceb.umtwxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaceb.xvawm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjaceb.zasreh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoacb.ahigtgw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoacb.anasd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoacb.brhtjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoacb.dpepqq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoacb.endjwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoacb.gqdqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoacb.htstx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoacb.hwnnp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoacb.ipqcdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoacb.knbau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoacb.psbxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoacb.rcpuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoacb.shayla.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoacb.umqpnp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoacb.vwpeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoacb.wxkmp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoacb.xvawm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoacb.ygfygq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoccb.ahibtgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoccb.ajvrrm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoccb.fvdx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoccb.kzrdoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoccb.qvodqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoccb.rcpuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoccb.sxped.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoccb.vgtmh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoccb.vnqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoccb.xgqnix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsceb.myjoccb.yripv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscicaenooeb.ceosnoen.xzkuf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200026129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaccb.aurh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaccb.cobnrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaccb.cpkac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaccb.cpwes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaccb.dmajj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaccb.efuq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaccb.hkjvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaccb.jhikxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaccb.kgrwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaccb.pqacju.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaccb.rcpuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaccb.rpwtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaccb.rqure.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaccb.rwje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaccb.tjliwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaccb.tlrriu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaceb.brhtjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaceb.efuq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaceb.gmrap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaceb.hwnnp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaceb.ipqcdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaceb.lzuzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaceb.mdzxfl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaceb.nbtgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaceb.prlhxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaceb.rbvjzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaceb.rwje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaceb.tgjqwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaceb.tjliwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaceb.txuhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaceb.usmqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjaceb.xjkuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjoccb.ajvrrm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjoccb.kgrwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjoccb.lzuzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjoccb.mesudz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjoccb.nmkxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjoccb.pqacju.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjoccb.psbxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjoccb.ralouz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjoccb.rcpuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjoccb.rfba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjoccb.rqjns.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjoccb.rqure.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjoccb.sxped.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjoccb.tgjqwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjoccb.wxkmp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacscsb.myjoccb.zlrjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsieccasonoeeb.ocenacoen.lkosdf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200026178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaccb.cpkac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaccb.csagj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaccb.endjwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaccb.fvdx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaccb.kyppkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaccb.pesuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaccb.rbvjzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaccb.rwje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaccb.shayla.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaccb.vwpeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaccb.wsykkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaceb.ahiatgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaceb.ahibtgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaceb.ahidtgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaceb.ahiftgx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaceb.akfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaceb.anasd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaceb.brhtjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaceb.cpwes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaceb.dcxpak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaceb.knbau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaceb.kzrdoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaceb.nvxfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaceb.nwvorv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaceb.rqjns.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaceb.xgqnix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjaceb.zlrjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoaeb.acch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoaeb.ahigtgw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoaeb.htstx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoaeb.kcywyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoaeb.khvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoaeb.kpmvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoaeb.kzrdoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoaeb.lzuzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoaeb.mesudz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoaeb.nmkxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoaeb.nwvorv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoaeb.rqure.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoaeb.rwje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoaeb.tlrriu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoaeb.tvuxev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoaeb.umqpnp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoaeb.vnqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoaeb.yripv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoccb.cpwes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoccb.dcxpak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoccb.dmajj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoccb.htstx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoccb.mdzxfl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoccb.mesudz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoccb.opdwxl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoccb.pesuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoccb.qcoknv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoccb.rfba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoccb.tkqjzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoccb.tpodqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoccb.tvuxev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoccb.xvawm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoceb.ahiatgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoceb.dcxpak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoceb.dpepqq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoceb.hkjvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoceb.pesuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoceb.rwje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoceb.tpodqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoceb.umtwxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoceb.wsykkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsoeb.myjoceb.ygfygq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaccb.ahiftgx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaccb.anasd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaccb.dpepqq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaccb.jhikxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaccb.mdzxfl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaccb.mesudz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaccb.mqiioz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaccb.rcpuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaccb.sagt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaccb.sxped.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaccb.tlrriu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaccb.txuhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaccb.umqpnp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaccb.vwpeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaceb.ahibtgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaceb.ahidtgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaceb.ahiftgx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaceb.akfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaceb.cfswnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaceb.cpkac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaceb.efuq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaceb.knbau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaceb.lzuzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaceb.pqacju.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaceb.qvodqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaceb.rqure.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaceb.tkqjzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaceb.umtwxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaceb.upcoww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaceb.vnqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjaceb.ygfygq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoccb.ahiftgx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoccb.dmajj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoccb.htstx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoccb.jgeta.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoccb.kpmvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoccb.kzrdoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoccb.mdzxfl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoccb.muol.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoccb.nvxfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoccb.pffgeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoccb.sagt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoccb.xvawm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoccb.zlrjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoceb.ahiatgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoceb.ahigtgw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoceb.kgrwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoceb.kmpmmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoceb.mesudz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoceb.muol.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoceb.nbtgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoceb.ralouz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoceb.tgjqwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoceb.vgtmh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoceb.wxkmp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoceb.xgqnix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoceb.xvawm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjacsosb.myjoceb.yripv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjaaacecb.awkxmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjaaacecb.bazujq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjaaacecb.djkew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjaaacecb.krjwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjaaacecb.pzijie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjaaacecb.qbutp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjaaacecb.ryjzhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjaaacecb.sfuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjaaacecb.uusuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjaaacecb.xakv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjaaacecb.xffcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjaaaeecb.fquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjaaaeecb.xffcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjaaaeecb.yxuku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjaaccecb.amuxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjaaccecb.bqbtt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjaaccecb.nhqfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjaaccecb.qbutp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjaaceecb.fepbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjaaceecb.xvrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjaaceecb.yxuku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjeaccecb.dxjkmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjeaccecb.krjwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjeaccecb.krteb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjeaccecb.mjsipu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjeaccecb.owkbzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjeaccecb.pzijie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjeaccecb.tpdave.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjeaccecb.xakv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjeaceecb.aqapd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjeaceecb.arujr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjeaceecb.awkxmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjeaceecb.uyszos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjeaceecb.xakv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjoaacecb.aqapd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjoaacecb.bmqbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjoaacecb.dskeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjoaacecb.grtyue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjoaacecb.txus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjoaacecb.ugkbea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjoaacecb.xvrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjoaccecb.argmyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjoaccecb.awkxmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjoaccecb.bazujq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjoaccecb.gesnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjoaccecb.nqkhfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjoaccecb.qthrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjoaccecb.sfuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjoaccecb.ugkbea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasceb.myjoaccecb.xakv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeascsb.myjaaccecb.fepbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeascsb.myjaaccecb.oajotw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeascsb.myjaaccecb.owkbzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeascsb.myjaaccecb.sfuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeascsb.myjaaccecb.tpdave.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeascsb.myjaaccecb.vlzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeascsb.myjaaccecb.xffcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeascsb.myjaaceecb.xakv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeascsb.myjaaceecb.xffcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasoeb.myjaaceecb.gesnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasoeb.myjaaceecb.tpdave.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasoeb.myjeaceecb.bmqbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasoeb.myjeaceecb.czcit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasoeb.myjeaceecb.owkbzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasoeb.myjoaaeecb.awkxmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasoeb.myjoaaeecb.bmqbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasoeb.myjoaaeecb.bqbtt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasoeb.myjoaaeecb.cfxyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasoeb.myjoaaeecb.grtyue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasoeb.myjoaaeecb.krteb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasoeb.myjoaaeecb.owkbzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasoeb.myjoaaeecb.qbutp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasoeb.myjoaceecb.bazujq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasoeb.myjoaceecb.dxjkmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasoeb.myjoaceecb.grtyue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasoeb.myjoaceecb.irubad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasoeb.myjoaceecb.sfuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasoeb.myjoaceecb.ugkbea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasoeb.myjoaceecb.uusuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasosb.myjaaceecb.bmqbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasosb.myjaaceecb.cfxyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasosb.myjaaceecb.kxrjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasosb.myjoaceecb.aqapd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasosb.myjoaceecb.argmyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasosb.myjoaceecb.irubad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasosb.myjoaceecb.kevnug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasosb.myjoaceecb.ryjzhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeasosb.myjoaceecb.ugkbea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjaaacecb.argmyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjaaacecb.owkbzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjaaacecb.qbutp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjaaacecb.uusuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjaaacecb.wymgje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjaaaeecb.irubad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjaaaeecb.mghjuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjaaaeecb.tpdave.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjaaaeecb.uyszos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjaaaeecb.xakv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjaaaeecb.xffcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjaaccecb.fepbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjaaccecb.krjwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjaaccecb.nqkhfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjaaccecb.vlzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjaaceecb.pzijie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjaaceecb.uusuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjoaacecb.cfxyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjoaacecb.fquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjoaacecb.mjsipu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjoaacecb.uyszos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjoaccecb.djkew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjoaccecb.gesnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjoaccecb.nhqfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjoaccecb.ryjzhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjoaccecb.tpdave.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjoaccecb.vlzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjoaccecb.xakv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsceb.myjoaccecb.xffcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecscsb.myjaaccecb.agvdnl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecscsb.myjaaccecb.wymgje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecscsb.myjaaccecb.xvrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecscsb.myjaaceecb.awkxmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecscsb.myjaaceecb.gesnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecscsb.myjaaceecb.wymgje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsoeb.myjaaccecb.gesnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsoeb.myjaaccecb.oajotw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsoeb.myjaaccecb.pzijie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsoeb.myjaaccecb.xakv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsoeb.myjaaceecb.czcit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsoeb.myjaaceecb.qbutp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsoeb.myjaaceecb.rascd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsoeb.myjaaceecb.ryjzhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsoeb.myjaaceecb.sfuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsoeb.myjoaaeecb.agvdnl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsoeb.myjoaaeecb.qthrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsoeb.myjoaccecb.bmqbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsoeb.myjoaccecb.cfxyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsoeb.myjoaccecb.fquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsoeb.myjoaccecb.pzijie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsoeb.myjoaccecb.ugkbea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsoeb.myjoaccecb.wymgje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsoeb.myjoaceecb.aqapd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsoeb.myjoaceecb.fepbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsoeb.myjoaceecb.nhqfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsoeb.myjoaceecb.nqkhfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsoeb.myjoaceecb.rascd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsoeb.myjoaceecb.txus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsoeb.myjoaceecb.ugkbea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsosb.myjaaccecb.dskeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsosb.myjaaccecb.qbutp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsosb.myjaaceecb.agvdnl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsosb.myjaaceecb.aujgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsosb.myjaaceecb.bmqbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsosb.myjaaceecb.djkew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsosb.myjaaceecb.owkbzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsosb.myjaaceecb.uusuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsosb.myjoaccecb.agvdnl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsosb.myjoaccecb.bmqbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsosb.myjoaccecb.bqbtt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsosb.myjoaccecb.czcit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsosb.myjoaccecb.hakws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsosb.myjoaccecb.nqkhfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsosb.myjoaccecb.oajotw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsosb.myjoaccecb.pzijie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsosb.myjoaceecb.bqbtt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsosb.myjoaceecb.czcit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsosb.myjoaceecb.dskeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsosb.myjoaceecb.freg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsosb.myjoaceecb.kevnug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsosb.myjoaceecb.oajotw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsosb.myjoaceecb.tpdave.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsosb.myjoaceecb.ugkbea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaecsosb.myjoaceecb.xakv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeesceb.myjeaccecb.bqbtt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeesceb.myjeaccecb.dskeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeesceb.myjeaccecb.mjsipu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeesceb.myjeaccecb.nhqfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeesceb.myjeaccecb.pzijie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeesceb.myjeaccecb.tpdave.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeesceb.myjoaccecb.aqapd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeesceb.myjoaccecb.cfxyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeesceb.myjoaccecb.czcit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeesceb.myjoaccecb.krjwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeesceb.myjoaccecb.tpdave.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeesoeb.myjeaccecb.arujr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeesoeb.myjeaccecb.aujgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeesoeb.myjeaccecb.owkbzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeesoeb.myjeaccecb.qthrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeesoeb.myjoaccecb.aujgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeesoeb.myjoaccecb.bmqbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeesoeb.myjoaccecb.hakws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeesoeb.myjoaccecb.kxrjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeesoeb.myjoaccecb.nhqfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeesoeb.myjoaccecb.sfuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeesoeb.myjoaccecb.uusuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaeesoeb.myjoaccecb.xvrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaescccoiasoensoeeb.ceosnacoen.b5jsued.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200026501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaescccoiasoensoeob.ceosnacoen.v3454.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200026502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaescccsasoenaseeb.ceosnacoen.lingangbcy.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200026503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjeccb.fvdx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjeccb.htstx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjeccb.jhikxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjeccb.kmpmmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjeccb.knbau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjeccb.kyppkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjeccb.mqiioz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjeccb.rbvjzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjeccb.rcpuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjeccb.rgcvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjeccb.tgjqwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjeccb.tkqjzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjeccb.vjbqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjoccb.acch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjoccb.anasd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjoccb.aurh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjoccb.gmrap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjoccb.htstx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjoccb.knbau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjoccb.mesudz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjoccb.pesuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjoccb.prlhxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjoccb.ralouz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjoccb.rqjns.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjoccb.tjliwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjoccb.tpodqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjoccb.tvuxev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesceb.myjoccb.xjkuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaescsccasasoenoeob.mceosnacoen.bfhju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200026532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaescseaoccocasoenoeeb.oceosnacoen.jsodiek.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200026533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesoeb.myjeccb.brhtjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesoeb.myjeccb.cfswnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesoeb.myjeccb.dpepqq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesoeb.myjeccb.jhikxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesoeb.myjeccb.kcywyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesoeb.myjeccb.knbau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesoeb.myjeccb.kzrdoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesoeb.myjeccb.pesuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesoeb.myjeccb.pffgeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesoeb.myjeccb.ralouz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesoeb.myjeccb.sagt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesoeb.myjeccb.sxped.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesoeb.myjeccb.umqpnp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesoeb.myjeccb.usmqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesoeb.myjeccb.vjbqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesoeb.myjeccb.zasreh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesoeb.myjoccb.acch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesoeb.myjoccb.ahiatgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesoeb.myjoccb.ahidtgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesoeb.myjoccb.fcak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesoeb.myjoccb.gmrap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesoeb.myjoccb.pesuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesoeb.myjoccb.rbvjzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesoeb.myjoccb.tkqjzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesoeb.myjoccb.tlrriu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaesseaoosaoenoeob.oosnacoen.baidu123.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200026559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjaocseooeb.myjaocseeseb.mojnlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjascseooeb.myejaoseeseb.mstcly.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasaeoeb.ca.gafuwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasaeoeb.ca.jimdyd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasaeoeb.ca.jjglsw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasaeoeb.ca.xulhaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjeacb.acchmuol.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjeacb.acchoghtgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjeacb.acchrgcvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjeacb.acchsagt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjeacb.acchtgjqwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjeacb.acchusmqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjeacb.acchxfppjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjeaeb.ahiftgx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjeaeb.ahigtgw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjeaeb.brhtjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjeaeb.cobnrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjeaeb.cpkac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjeaeb.dmajj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjeaeb.fcak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjeaeb.gmrap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjeaeb.gqdqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjeaeb.htstx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjeaeb.mdzxfl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjeaeb.mesudz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjeaeb.prlhxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjeaeb.shayla.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjeaeb.tpodqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjescb.anasd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjescb.cpwes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjescb.hwnnp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjescb.kmpmmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjescb.kpmvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjescb.mdzxfl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjescb.mqiioz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjescb.oghtgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjescb.pqacju.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjescb.rbvjzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjescb.sxped.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjescb.tpodqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjescb.ugmutx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjescb.usmqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjescb.vnqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoacb.ahigtgw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoacb.akfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoacb.csagj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoacb.endjwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoacb.fcak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoacb.jhikxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoacb.khvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoacb.kpmvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoacb.kyppkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoacb.lzuzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoacb.mesudz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoacb.mqiioz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoacb.rcpuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoacb.rgcvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoacb.rpwtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoacb.sagt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoacb.tlrriu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoscb.acch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoscb.cfswnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoscb.cobnrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoscb.endjwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoscb.jhikxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoscb.kcywyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoscb.ralouz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoscb.rpwtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoscb.shayla.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoscb.tvuxev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoscb.txuhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoscb.vjbqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoscb.xvawm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasceb.myjoscb.yripv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcascsoaensaab.ceosnoen.t4gwf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200026634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcaseeocb.caa.ipexqv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcaseeocb.caa.lhzfkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcaseob.c.npxfcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjeseb.acch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjeseb.ahigtgw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjeseb.efuq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjeseb.gqdqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjeseb.kmpmmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjeseb.kyppkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjeseb.kzrdoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjeseb.mesudz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjeseb.nwvorv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjeseb.opdwxl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjeseb.prlhxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjeseb.tkqjzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjeseb.ugmutx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoaeb.acch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoaeb.ahibtgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoaeb.cpwes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoaeb.jhikxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoaeb.khvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoaeb.kyppkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoaeb.nxkka.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoaeb.xgqnix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoaeb.zasreh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoaeb.zlrjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoseb.ahidtgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoseb.anasd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoseb.kyppkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoseb.nwvorv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoseb.prlhxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoseb.psbxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoseb.qvodqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoseb.rqjns.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoseb.ugmutx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoseb.usmqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoseb.vjbqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoseb.wxkmp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoseb.xfppjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoseb.xvawm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoseb.yripv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcasoeb.myjoseb.zlrjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaacb.ahibtgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaacb.ahiftgx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaacb.ajvrrm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaacb.cobnrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaacb.hkjvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaacb.htstx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaacb.knbau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaacb.muol.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaacb.nbtgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaacb.nxkka.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaacb.rwje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaacb.sxped.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaacb.tlrriu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaacb.vgtmh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaacb.xjkuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaacb.xvawm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaaeb.ahiatgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaaeb.akfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaaeb.gmrap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaaeb.khvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaaeb.knbau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaaeb.nvxfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaaeb.nxkka.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaaeb.prlhxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaaeb.qcoknv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaaeb.ralouz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaaeb.rbvjzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaaeb.tgjqwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaaeb.tlrriu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaaeb.usmqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaaeb.ygfygq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaaeb.zasreh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjaaeb.zghvtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjascb.brhtjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjascb.dpepqq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjascb.efuq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjascb.fvdx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjascb.kgrwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjascb.knbau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjascb.nwvorv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjascb.oghtgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjascb.pqacju.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjascb.rwje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjascb.sagt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjascb.vnqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjascb.ygfygq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjascb.zghvtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoacb.acch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoacb.ahigtgw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoacb.ajvrrm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoacb.anasd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoacb.cpkac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoacb.ipqcdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoacb.jhikxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoacb.rbvjzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoacb.rqure.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoacb.tgjqwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoacb.wsykkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoscb.ahiftgx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoscb.akfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoscb.efuq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoscb.hkjvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoscb.htstx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoscb.kcywyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoscb.kyppkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoscb.lzuzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoscb.mesudz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoscb.ralouz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoscb.rcpuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoscb.rqjns.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoscb.tkqjzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoscb.vwpeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoscb.wsykkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoscb.wxkmp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsceb.myjoscb.ygfygq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjascb.ajvrrm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjascb.kpmvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjascb.nxkka.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjascb.psbxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjascb.qvodqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjascb.rbvjzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjascb.rgcvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjascb.rwje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjascb.tjliwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjascb.vwpeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjascb.yripv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjaseb.cfswnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjaseb.fvdx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjaseb.kzrdoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjaseb.nvxfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjaseb.oghtgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjaseb.sxped.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjaseb.tgjqwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjaseb.tjliwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjaseb.ugmutx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjaseb.xfppjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjaseb.ygfygq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoacb.ahiftgx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoacb.ahigtgw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoacb.ajvrrm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoacb.aurh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoacb.cpkac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoacb.hwnnp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoacb.kcywyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoacb.kmpmmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoacb.mqiioz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoacb.nbtgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoacb.shayla.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoacb.tjliwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoacb.umtwxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoacb.upcoww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoacb.vgtmh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoacb.wsykkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoacb.xfppjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoacb.zasreh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoacb.zlrjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoaeb.anasd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoaeb.hkjvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoaeb.mqiioz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoaeb.muol.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoaeb.nvxfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoaeb.nwvorv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoaeb.prlhxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoaeb.psbxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoaeb.qcoknv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoaeb.rbvjzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoaeb.rgcvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoaeb.sagt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoaeb.upcoww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoscb.acch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoscb.ahidtgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoscb.anasd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoscb.brhtjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoscb.bwrdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoscb.dpepqq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoscb.efuq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoscb.fcak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoscb.ipqcdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoscb.kcywyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoscb.kgrwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoscb.kpmvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoscb.tgjqwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoscb.tjliwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoscb.txuhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoscb.upcoww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoscb.wxkmp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoseb.ajvrrm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoseb.dcxpak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoseb.htstx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoseb.hwnnp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoseb.ipqcdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoseb.jgeta.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoseb.kyppkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoseb.mesudz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoseb.psbxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoseb.qcoknv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoseb.ralouz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoseb.rqure.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoseb.shayla.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoseb.tgjqwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoseb.vwpeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjccsoeb.myjoseb.xgqnix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceaeeccasonosob.mcenacoen.vardir.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200026839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceaesecroab.ccoaa.tvxkmp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasareaoecb.cao.gafuwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasareaoecb.cao.zqjkvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceascccoiasoensosob.ceosnacoen.dieowp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200026843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeaacecb.argmyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeaacecb.aujgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeaacecb.fepbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeaacecb.irubad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeaacecb.krjwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeaacecb.mghjuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeaacecb.qthrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeaacecb.rascd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeaacecb.xvrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeaaeecb.amuxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeaaeecb.awkxmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeaaeecb.djkew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeaaeecb.dxjkmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeaaeecb.sfuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeaaeecb.uvpuqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeascecb.aqapd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeascecb.djkew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeascecb.dskeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeascecb.dxjkmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeascecb.fquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeascecb.krteb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeascecb.oajotw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeascecb.pzijie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeascecb.txus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeascecb.uusuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeascecb.vlzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeascecb.xffcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjeascecb.yxuku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjoaacecb.amuxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjoaacecb.aujgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjoaacecb.bqbtt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjoaacecb.dxjkmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjoaacecb.fepbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjoaacecb.irubad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjoaacecb.kxrjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjoaacecb.ryjzhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjoaacecb.tpdave.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjoaacecb.vlzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjoaacecb.xakv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjoascecb.amuxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjoascecb.djkew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjoascecb.kxrjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjoascecb.rascd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjoascecb.ugkbea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasceb.myjoascecb.vlzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceaseroab.cco.vnxgwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceaseroab.cco.xdaupp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasoeb.myjeaseecb.grtyue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasoeb.myjeaseecb.irubad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasoeb.myjeaseecb.rascd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasoeb.myjeaseecb.xffcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasoeb.myjeaseecb.yxuku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasoeb.myjoaaeecb.amuxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasoeb.myjoaaeecb.fepbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasoeb.myjoaaeecb.nqkhfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasoeb.myjoaaeecb.pzijie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasoeb.myjoaaeecb.tpdave.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasoeb.myjoaaeecb.xvrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasoeb.myjoaseecb.dxjkmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasoeb.myjoaseecb.krjwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceasoeb.myjoaseecb.xakv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjaaacecb.argmyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjaaacecb.hakws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjaaacecb.ugkbea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjaaaeecb.aujgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjaaaeecb.ugkbea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjaaaeecb.uvpuqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjaaaeecb.uyszos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjaaaeecb.vlzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjaaaeecb.xvrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjaascecb.freg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjaascecb.kevnug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjaascecb.kxrjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjaascecb.xakv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjoaacecb.agvdnl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjoaacecb.aqapd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjoaacecb.argmyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjoaacecb.bazujq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjoaacecb.dxjkmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjoaacecb.fepbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjoaacecb.freg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjoaacecb.kevnug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjoaacecb.krjwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjoaacecb.mjsipu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjoaacecb.nhqfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjoaacecb.nqkhfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjoaacecb.uvpuqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsceb.myjoaacecb.xakv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjaascecb.fepbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjaascecb.hakws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjaascecb.krjwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjaascecb.mghjuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjaascecb.nqkhfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjaascecb.owkbzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjaascecb.qbutp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjaascecb.wymgje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjaascecb.xffcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjaaseecb.agvdnl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjaaseecb.nhqfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaacecb.argmyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaacecb.dskeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaacecb.dxjkmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaacecb.fquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaacecb.freg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaacecb.grtyue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaacecb.rascd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaacecb.txus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaacecb.xakv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaaeecb.arujr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaaeecb.bmqbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaaeecb.czcit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaaeecb.irubad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaaeecb.krjwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaaeecb.kxrjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaaeecb.qbutp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaaeecb.rascd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaaeecb.xffcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoascecb.agvdnl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoascecb.gesnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoascecb.irubad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoascecb.kevnug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoascecb.xvrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaseecb.agvdnl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaseecb.amuxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaseecb.fepbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaseecb.gesnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaseecb.nhqfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaseecb.pzijie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaseecb.ryjzhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcecsoeb.myjoaseecb.xvrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjeaacecb.arujr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjeaacecb.gesnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjeaacecb.krjwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjeaacecb.nhqfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjeaacecb.nqkhfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjeaacecb.xakv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjeascecb.amuxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjeascecb.awkxmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjeascecb.djkew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjeascecb.dskeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjeascecb.fepbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjeascecb.grtyue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjeascecb.mghjuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjeascecb.uusuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjeascecb.vlzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjeascecb.xffcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjeascecb.yxuku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjoaacecb.bqbtt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjoaacecb.gesnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjoaacecb.hakws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjoaacecb.kevnug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjoaacecb.mjsipu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjoaacecb.qbutp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjoascecb.agvdnl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjoascecb.aujgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjoascecb.cfxyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200026999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjoascecb.gesnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjoascecb.oajotw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjoascecb.rascd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjoascecb.txus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjoascecb.uusuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjoascecb.uvpuqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesceb.myjoascecb.xffcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesoeb.myjeascecb.fquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesoeb.myjeascecb.freg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesoeb.myjeascecb.nhqfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesoeb.myjeascecb.oajotw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesoeb.myjoaacecb.arujr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesoeb.myjoaacecb.bqbtt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesoeb.myjoaacecb.cfxyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesoeb.myjoaacecb.dskeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesoeb.myjoaacecb.irubad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesoeb.myjoaacecb.qbutp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesoeb.myjoaacecb.xakv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesoeb.myjoascecb.aujgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesoeb.myjoascecb.cfxyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesoeb.myjoascecb.krjwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjceesoeb.myjoascecb.krteb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjeacb.ahiftgx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjeacb.cpwes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjeacb.endjwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjeacb.jhikxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjeacb.pffgeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjeacb.psbxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjeacb.rbvjzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjeacb.shayla.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjeacb.tkqjzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjeacb.tlrriu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjeacb.ugmutx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjescb.ahiatgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjescb.hkjvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjescb.khvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjescb.mesudz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjescb.nbtgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjescb.oghtgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjescb.rpwtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjescb.rqjns.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjescb.tgjqwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjescb.ugmutx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjescb.usmqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjescb.zlrjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoacb.ajvrrm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoacb.cpkac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoacb.cpwes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoacb.efuq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoacb.endjwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoacb.hkjvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoacb.khvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoacb.nmkxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoacb.rfba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoacb.rqjns.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoacb.rwje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoacb.tlrriu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoacb.vjbqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoacb.yripv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoscb.ahibtgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoscb.bwrdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoscb.gmrap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoscb.kcywyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoscb.knbau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoscb.kpmvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoscb.kzrdoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoscb.nvxfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoscb.opdwxl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoscb.ralouz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoscb.rwje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoscb.umqpnp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoscb.usmqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoscb.vgtmh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoscb.vjbqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoscb.vwpeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesceb.myjoscb.wsykkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjescb.ahidtgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjescb.ahiftgx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjescb.ahigtgw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjescb.dmajj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjescb.ipqcdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjescb.kcywyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjescb.muol.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjescb.nvxfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjescb.psbxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjescb.ralouz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjescb.rqure.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjescb.txuhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjescb.umqpnp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjescb.vgtmh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjescb.vwpeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjescb.zasreh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjescb.zlrjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoacb.ahibtgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoacb.ahiftgx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoacb.cpkac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoacb.fvdx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoacb.lzuzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoacb.mdzxfl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoacb.qcoknv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoacb.ralouz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoacb.rqure.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoacb.zasreh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoscb.aurh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoscb.brhtjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoscb.dmajj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoscb.efuq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoscb.fcak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoscb.kyppkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoscb.nmkxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoscb.nwvorv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoscb.pffgeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoscb.prlhxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoscb.ralouz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoscb.sxped.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoscb.tjliwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoscb.vwpeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoscb.xvawm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjcesoeb.myjoscb.zlrjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeacsceooesb.moyjeasocseeseb.gzfmft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasccseooseb.omyeesjcaoseeseb.gnpais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjaacb.htstx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjaacb.khvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjaacb.pqacju.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjaacb.psbxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjaacb.tkqjzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjaacb.tlrriu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjaacb.usmqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjaacb.wxkmp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjaacb.zasreh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjaaeb.acch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjaaeb.ahidtgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjaaeb.cpkac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjaaeb.cpwes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjaaeb.dmajj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjaaeb.hkjvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjaaeb.kmpmmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjaaeb.kpmvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjaaeb.nwvorv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjaaeb.pqacju.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjaaeb.psbxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjaaeb.qcoknv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjaaeb.rqjns.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjaaeb.rqure.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjaaeb.tgjqwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjaaeb.upcoww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjascb.ahiatgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjascb.ahidtgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjascb.bwrdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjascb.dpepqq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjascb.efuq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjascb.hwnnp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjascb.knbau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjascb.kyppkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjascb.mesudz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjascb.nvxfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjascb.oghtgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjascb.pesuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjascb.qvodqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjascb.rcpuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjascb.rqjns.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjascb.tvuxev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjascb.ugmutx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjascb.upcoww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjascb.vjbqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjascb.wxkmp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoacb.ajvrrm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoacb.bwrdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoacb.cfswnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoacb.cpwes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoacb.dmajj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoacb.efuq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoacb.khvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoacb.mesudz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoacb.muol.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoacb.nwvorv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoacb.rbvjzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoacb.smpqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoacb.tgjqwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoacb.tjliwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoacb.tvuxev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoacb.umtwxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoacb.zlrjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoscb.ahiftgx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoscb.anasd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoscb.khvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoscb.kyppkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoscb.nvxfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoscb.nxkka.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoscb.opdwxl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoscb.pqacju.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoscb.ralouz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoscb.rcpuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoscb.tlrriu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoscb.usmqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoscb.wxkmp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoscb.xfppjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeascsb.myjoscb.zghvtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjaseb.ahibtgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjaseb.ahidtgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjaseb.anasd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjaseb.cfswnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjaseb.efuq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjaseb.endjwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjaseb.gqdqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjaseb.qcoknv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjaseb.rqjns.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjaseb.rwje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjaseb.tjliwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjaseb.vnqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjaseb.ygfygq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjaseb.yripv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoaeb.acch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoaeb.kgrwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoaeb.kzrdoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoaeb.lzuzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoaeb.opdwxl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoaeb.umtwxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoaeb.vjbqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoaeb.xfppjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoaeb.zghvtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoaeb.zlrjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoseb.ahidtgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoseb.ahiftgx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoseb.akfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoseb.cpwes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoseb.fcak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoseb.gqdqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoseb.hkjvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoseb.jhikxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoseb.oghtgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoseb.opdwxl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoseb.pffgeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoseb.ralouz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoseb.rfba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoseb.rgcvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoseb.rqure.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoseb.sxped.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoseb.tjliwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoseb.usmqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoseb.vnqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeasosb.myjoseb.xgqnix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaacb.akfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaacb.aurh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaacb.cobnrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaacb.dcxpak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaacb.endjwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaacb.fvdx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaacb.ipqcdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaacb.jhikxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaacb.khvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaacb.knbau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaacb.mdzxfl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaacb.mqiioz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaacb.nvxfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaacb.pffgeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaacb.rgcvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaacb.rpwtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaacb.sxped.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaacb.zghvtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaaeb.ahidtgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaaeb.brhtjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaaeb.cfswnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaaeb.cobnrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaaeb.dcxpak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaaeb.fcak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaaeb.fvdx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaaeb.gqdqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaaeb.jhikxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaaeb.nbdu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaaeb.nwvorv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaaeb.rcpuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaaeb.rfba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaaeb.tvuxev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaaeb.umtwxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaaeb.usmqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaaeb.xfppjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjaaeb.yripv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjascb.ajvrrm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjascb.dmajj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjascb.kcywyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjascb.khvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjascb.mdzxfl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjascb.nwvorv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjascb.oghtgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjascb.psbxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjascb.sagt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjascb.umqpnp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjascb.usmqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjascb.vjbqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjascb.vnqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjascb.xvawm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjascb.ygfygq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoacb.ahiftgx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoacb.ahigtgw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoacb.cobnrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoacb.fcak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoacb.gmrap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoacb.kpmvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoacb.nbdu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoacb.pesuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoacb.pqacju.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoacb.qvodqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoacb.ralouz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoacb.rfba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoacb.txuhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoacb.wxkmp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoacb.xfppjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoscb.ahigtgw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoscb.akfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoscb.brhtjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoscb.efuq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoscb.gmrap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoscb.kgrwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoscb.kmpmmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoscb.kpmvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoscb.muol.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoscb.nxkka.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoscb.qcoknv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoscb.smpqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoscb.sxped.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoscb.tvuxev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecscsb.myjoscb.ugmutx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjascb.fcak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjascb.nmkxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjascb.pqacju.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjascb.ugmutx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjascb.usmqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjascb.vgtmh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjascb.vwpeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjaseb.ahiftgx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjaseb.ahigtgw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjaseb.brhtjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjaseb.dmajj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjaseb.hkjvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjaseb.ipqcdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjaseb.kyppkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjaseb.mesudz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjaseb.nmkxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjaseb.qcoknv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjaseb.rbvjzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjaseb.sagt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjaseb.smpqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjaseb.vwpeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjaseb.zghvtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoacb.ahidtgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoacb.akfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoacb.cpwes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoacb.dcxpak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoacb.hwnnp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoacb.ipqcdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoacb.kcywyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoacb.khvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoacb.kmpmmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoacb.knbau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoacb.nbtgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoacb.qvodqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoacb.tkqjzf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoacb.umtwxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoacb.usmqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoacb.vjbqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoacb.wsykkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoacb.xfppjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoacb.xvawm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoacb.ygfygq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoaeb.ajvrrm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoaeb.akfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoaeb.anasd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoaeb.endjwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoaeb.ipqcdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoaeb.kcywyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoaeb.kpmvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoaeb.nbtgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoaeb.nvxfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoaeb.opdwxl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoaeb.psbxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoaeb.qcoknv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoaeb.xjkuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoscb.cobnrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoscb.dmajj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoscb.gqdqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoscb.hkjvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoscb.htstx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoscb.kgrwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoscb.kyppkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoscb.kzrdoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoscb.mqiioz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoscb.nbdu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoscb.nvxfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoscb.pffgeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoscb.umtwxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoscb.usmqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoscb.vjbqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoscb.xjkuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoseb.anasd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoseb.dmajj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoseb.kmpmmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoseb.muol.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoseb.nxkka.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoseb.pffgeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoseb.psbxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoseb.rqure.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoseb.rwje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoseb.tjliwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoseb.umqpnp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoseb.ygfygq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjecsosb.myjoseb.zlrjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaaacecb.bazujq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaaacecb.cfxyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaaacecb.djkew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaaacecb.kxrjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaaacecb.mghjuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaaacecb.mjsipu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaaacecb.oajotw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaaacecb.txus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaaacecb.ugkbea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaaacecb.uusuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaaaeecb.amuxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaaaeecb.krteb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaaaeecb.mghjuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaaaeecb.qthrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaaaeecb.rascd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaaaeecb.ryjzhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaascecb.djkew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaascecb.dskeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaascecb.grtyue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaascecb.kevnug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaascecb.mjsipu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaascecb.qthrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaascecb.rascd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaascecb.ugkbea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaascecb.wymgje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjaascecb.xffcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjoascecb.bmqbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjoascecb.dskeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjoascecb.dxjkmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeascsb.myjoascecb.nhqfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeasosb.myjaaseecb.dxjkmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeasosb.myjaaseecb.gesnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeasosb.myjaaseecb.krteb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeasosb.myjaaseecb.mghjuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeasosb.myjaaseecb.nqkhfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeasosb.myjoaaeecb.amuxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeasosb.myjoaaeecb.argmyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeasosb.myjoaaeecb.arujr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeasosb.myjoaaeecb.aujgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeasosb.myjoaaeecb.bqbtt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeasosb.myjoaaeecb.dxjkmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeasosb.myjoaaeecb.fquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeasosb.myjoaaeecb.hakws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeasosb.myjoaaeecb.krjwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeasosb.myjoaaeecb.sfuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeasosb.myjoaaeecb.uvpuqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeasosb.myjoaaeecb.xffcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeasosb.myjoaaeecb.yxuku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeasosb.myjoaseecb.czcit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeasosb.myjoaseecb.djkew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeasosb.myjoaseecb.grtyue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeasosb.myjoaseecb.irubad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeasosb.myjoaseecb.mjsipu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeasosb.myjoaseecb.owkbzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeeasosb.myjoaseecb.uusuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecscsb.myjaaacecb.agvdnl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecscsb.myjaaacecb.aqapd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecscsb.myjaaacecb.argmyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecscsb.myjaaacecb.arujr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecscsb.myjaaacecb.pzijie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecscsb.myjaaaeecb.agvdnl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecscsb.myjaaaeecb.kxrjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecscsb.myjaaaeecb.mghjuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecscsb.myjaaaeecb.nhqfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecscsb.myjaascecb.arujr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecscsb.myjaascecb.hakws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecscsb.myjaascecb.kxrjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecscsb.myjaascecb.pzijie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecscsb.myjoaacecb.bazujq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecscsb.myjoaacecb.gesnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecscsb.myjoaacecb.nhqfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecscsb.myjoaacecb.qbutp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecscsb.myjoaacecb.uvpuqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecscsb.myjoaacecb.yxuku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecscsb.myjoascecb.amuxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecscsb.myjoascecb.freg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecscsb.myjoascecb.grtyue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecscsb.myjoascecb.uusuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjaascecb.fquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjaascecb.kevnug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjaascecb.krteb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjaascecb.nhqfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjaascecb.qbutp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjaascecb.ryjzhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjaaseecb.awkxmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjaaseecb.bmqbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjaaseecb.kevnug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjaaseecb.mjsipu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjaaseecb.oajotw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjaaseecb.pzijie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjaaseecb.qbutp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjaaseecb.sfuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaacecb.irubad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaacecb.kevnug.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaacecb.mghjuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaacecb.oajotw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaaeecb.aqapd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaaeecb.cfxyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaaeecb.freg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaaeecb.krjwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaaeecb.qbutp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaaeecb.ryjzhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaaeecb.txus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaaeecb.uusuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaaeecb.uyszos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaaeecb.wymgje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaaeecb.yxuku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoascecb.bazujq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoascecb.bqbtt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoascecb.oajotw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoascecb.qthrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaseecb.amuxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaseecb.argmyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaseecb.awkxmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaseecb.djkew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaseecb.irubad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaseecb.krjwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaseecb.mjsipu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaseecb.sfuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaseecb.uusuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaseecb.uyszos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjeecsosb.myjoaseecb.xffcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjiomart.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200027529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjsacaseeob.oa.qzvxui.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjsacaseeob.oa.xhgmfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjsacasoesb.na.qzvxui.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjsaceascoesb.naaa.xhgmfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjsacesecob.oaa.cjehdm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjsacesecob.oaa.tvxkmp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjsacesocsb.naa.xdaupp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjsacsosb.n.cjehdm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjsacsosb.n.xhgmfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjseacarsaoecsb.nao.lhzfkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjseacarsaoecsb.nao.zbvvpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjseacsroasbc.no.clllbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjseaecacrsaeecob.oaoaa.jjglsw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myjseaecacrsaoecsb.naoaa.gafuwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mylocaladspaceblog.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mymoneoro.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200027545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mymonero.net.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200027546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mymymmaik053.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200027547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mynab-request-contact.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mynabsecurity.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mynavy-folder-queryculosebrbxworkersdev.culasebrbx.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mynavy-src-resource.routin.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mynzsjh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mypaypepsico.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mypayslip.sutherlandglobal.cm"; content:"Host"; http_header; classtype:attempted-recon; sid:200027554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mypoczta-polska.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200027555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mypost-ch.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200027556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myposta-si.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myprojectfiles8874887.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myreniwn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mysecureattaccounr989.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mysecureb.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200027561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myshedbuilder.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mysite-108921.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mysite-1o-9091-103299.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mysite41327-6681-108383.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myspark.on.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mytarges.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mytheamsauthecent.wapgem.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myvvxhcibr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mywalet-gala-games-io.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mywealthhub.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200027571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mywebgoal.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myworkspaced58c7.myclickfunnels.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mzlmmmylcq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mzsgjjifhs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mzydqduzxs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"n-holdings.co.za"; content:"Host"; http_header; classtype:attempted-recon; sid:200027577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"n-ver.unaux.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"n12bradsconetempresa.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"n12pjacess-empresapj.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"n3rem8.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nab-online-login.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nab-online-security.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nab-protodesk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nab-www.303.si"; content:"Host"; http_header; classtype:attempted-recon; sid:200027585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nabcancellationauth.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nabib-auth-au.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nabsecuritycustomersupport.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nacion3.banconacioncd.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nacional.bncrnacional5.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nacionalcr.banconacional19.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nacionalcr.banconacional27.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nadiutama.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nahtldkbds.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"naimisharanyatirtha.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"najboljeuslugezavas.betterservicesforyou.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"name-103197.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"namele.marpuasabentar.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nameless-fog-03c7.dotmay820.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nameless-sound-0712.on.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"namelessajaa.topijerami.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"namelesstr.topijerami.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nanesu.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200027603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nanhopemen.biz"; content:"Host"; http_header; classtype:attempted-recon; sid:200027604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nano.personalwebpicj.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"naoutamateep.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200027606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"napaautoparts.us.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"napffx5.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"narcyzmarzecki.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200027609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"naru234toetube.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200027610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nascimentoadvg.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nasdaqes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nasdaqet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"natalfeliz.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200027614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"natdk-baannk.life"; content:"Host"; http_header; classtype:attempted-recon; sid:200027615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nationsretirementvc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nattynetworks.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"natura.nzazi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"natural-mill.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"naturalcanshop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"naturaloilbody.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"naturalrocksand.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"naturhouse.sk"; content:"Host"; http_header; classtype:attempted-recon; sid:200027623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"naukriseva.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200027624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nauticaldrink.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"navajowhitegrandiosequeryoptimizer.primajs.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"navi10.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"navi17.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"navi20.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"navi30.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"navi31.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"navi41.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"navi47.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"navi51.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"navi9.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"navigator.d1pe40kai4h8dz.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"navionline.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200027637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"navyfedcu5099acct.ddns.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200027638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"navyfederal-e760.navyfederal432.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nayanielectronics.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nbaa7782gm.temp.swtest.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200027641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nbauajfbnp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nbbkwejohz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nbdnqdb.2kool4u.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200027644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nbg-myid-greece-online.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nbiwjnehdu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nbqajcryrf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nbsoxogemf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nby1um.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ncdecorg.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ncir20s.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ncis20sr.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ncl.global"; content:"Host"; http_header; classtype:attempted-recon; sid:200027653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ncoafd53cfe55c1019f08c3c010c89f8918efd53cfe55c1019f08c3c010c89f.ncoa-org.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ncpipo.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200027655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ncqlpxozzo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ndbtxfevbq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ndeflawtechnologies.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ndhf99ff.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200027659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ndjfuuf99.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200027660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ndrcfksorh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ndwyzypugv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ne12bradsconetempresa.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"neaar-wallet.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"near-wallet-login-hom.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nearwalletgithome.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"neatlay.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"necudneflirty.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nedbankqa.flowblocks.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"need.manthem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"neeshaplastic.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"neilsensavers.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"neixol.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"neohealth.co.bw"; content:"Host"; http_header; classtype:attempted-recon; sid:200027674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"neoiphones.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nervous-song.surge.sh"; content:"Host"; http_header; classtype:attempted-recon; sid:200027676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nesgvjmuon.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nesuvicxjl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"net-account-ch.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"net-bcb7cc.ingress-bonde.ewp.live.kazinazrul.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"net-empresas-bradessco.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"net-flix-payment.thecornercoffeeshop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"net12bradscoempresas.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netaietion-aplus2.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netbank.takerek.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netex24.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200027686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netex24.name"; content:"Host"; http_header; classtype:attempted-recon; sid:200027687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netfilxinfo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netflix-assistant.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netflix-egkhowk2a-ndtrang121.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200027690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netflix-new.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netflix-offers.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netflix-paiement.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netflix-sales.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netflix.netflixsupport.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netflixaccount-department.oauth-loginservice.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netflixbilling.com-payments.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netflixguiltless-guide.surge.sh"; content:"Host"; http_header; classtype:attempted-recon; sid:200027698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netflixquebec.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netstation2aplus.kuziyvhuyeoznz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netstation2aplus.mfjuzuczaaqj.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netstation2aplus.mjfuzhvvzsgdve.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netsystemlab.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"network1lnc.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200027704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"network360000.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"network360000.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200027706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"network360006.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"network360006.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200027708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"network360007.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"network360007.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200027710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"networksolutions-fd.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"networksolutions-fd.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200027712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"neverfeartruth.this-mint.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200027713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"neversencommun.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200027714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"new--ex.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200027715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"new--operacionsss.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"new-document-shared-from-someone-in-your-contactlist.us-east-1.linodeobjects.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"new-ex-y3.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200027718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"new-excel-document-sign-in-to-view-document5nckn85tsjkujs082s32.us-southeast-1.linodeobjects.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"new-exel-document-verify-your-authentication.us-east-1.linodeobjects.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"new-fax-email-received-from-scanner-portal.us-east-1.linodeobjects.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"new-fax-mail-received-from-scanner-portals.us-southeast-1.linodeobjects.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"new-message-for-ur-approval-po.us-east-1.linodeobjects.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"new-msdoc.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"new-pay.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200027725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"new-scan-document-received-from-printer-cwlbvhfjedpinugyomkxrtq.us-southeast-1.linodeobjects.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"new-scan-document-received-from-printer-hzwngjixomtalfpqdrkuysb.us-east-1.linodeobjects.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"new-wasallelylog.azurewebsites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200027728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"new.espejoss.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"new.operacionsss.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"new.securesss.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"new11--pichinchapers.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"new11.pichinchapers.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"newbaattmail.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200027734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"newbies001.bitbucket.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200027735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"newcoinprof.grat-forpl.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200027736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"newhomepoocoin.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"newhopemakassar.co.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200027738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"newlens.ae"; content:"Host"; http_header; classtype:attempted-recon; sid:200027739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"newlink-popup-smart.biglink.to"; content:"Host"; http_header; classtype:attempted-recon; sid:200027740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"newoppensea.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"newriskmanagement.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200027742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"news.update.information.kha1ru5.tech"; content:"Host"; http_header; classtype:attempted-recon; sid:200027743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"newspass.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200027744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"newstyleprojects.co.za"; content:"Host"; http_header; classtype:attempted-recon; sid:200027745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"newtoed.bond"; content:"Host"; http_header; classtype:attempted-recon; sid:200027746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"newty.rf.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200027747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nexflixreply.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nexoinmobiliario.pe"; content:"Host"; http_header; classtype:attempted-recon; sid:200027749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nexspendallaccess.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nexteraenergy.co.za"; content:"Host"; http_header; classtype:attempted-recon; sid:200027751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"neyblqchtz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"neyyahoomailupdatedversion.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nfbxhrbwti.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nfcu-rain-482f.alicemposton.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nfcuhelp-secured.authorizeddns.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200027756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nfcusecured.mrbasic.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nflx1311202250766898320844729898320844729ch.btcjp.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nfsfnwkiqk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nft-restore.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200027760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nft-worldofwomen.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nft90.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200027762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nftio.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200027763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nftmint.finance"; content:"Host"; http_header; classtype:attempted-recon; sid:200027764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nftracking.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200027765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nftstar.inmint.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200027766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nfuupoepiu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nfwqbaoaal.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nfzzfirusy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ngedngudgw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ngmwsjxaah.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nhatngusakura.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nhattinsteel.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nhsapply-covid-pass.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nhylgevymm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nhymkxptxe.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ni-bltkiub.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200027777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"niagarapower.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"niamshi.space"; content:"Host"; http_header; classtype:attempted-recon; sid:200027779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"niapxrwyph.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nice-bhabha.31-192-235-57.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200027781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nice-haibt.35-192-166-139.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200027782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nice-lalande.5-255-101-246.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200027783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nicepriceoffice.nl"; content:"Host"; http_header; classtype:attempted-recon; sid:200027784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nichido-monthly.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200027785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nickelodoenft.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nicoleaction.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nicoledruschnewitz.clickfunnels.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nid.cacac.cloudns.nz"; content:"Host"; http_header; classtype:attempted-recon; sid:200027789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nighkclick.biz"; content:"Host"; http_header; classtype:attempted-recon; sid:200027790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nightiieproj00010.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200027791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nightiieproj00011.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200027792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nightiieproj0006.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nightiieproj0007.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nightiieproj0009.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nightiieproj0009.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200027796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nihkuvcgtq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nike.rrtfkt.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nikkofarmer.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nime-ijh7.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200027800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nimh.gov.vn"; content:"Host"; http_header; classtype:attempted-recon; sid:200027801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ninchisho-cafe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ninjalerts.llmint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nishikigoi.win-mint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nitffebskt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nitro.neeve.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nituopedrq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nitzsche.gbtefxryt7-95m32xerr6rv.p.temp-site.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200027808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"niymgidc.gq"; content:"Host"; http_header; classtype:attempted-recon; sid:200027809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nizotchauffage.bilty.be"; content:"Host"; http_header; classtype:attempted-recon; sid:200027810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"njfhdfgdgf36534.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"njgenarzxs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"njiu4yuei.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200027813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"njpxfbhiwv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nkanyisosecurity.co.za"; content:"Host"; http_header; classtype:attempted-recon; sid:200027815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nkcgawdnnl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nkpwvtdhbp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nkxbagvutg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nlakeaaxjl.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nlakeaaxjl.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200027820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nlnihuumfl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nlrxh5.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nmcutdiabf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nmdqw.oeanymufmdhoy169.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nmeylaxywo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nmglgghrjd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nmikyxaktt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nmkvyzkayp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nmrefrigeration.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nmwwsdwvte.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nn-bltkub-com.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200027831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nnedapgigw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nnelannask.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200027833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nngybkvcot.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nnorthierefenence.li32e3fuo.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nntzsyhbdd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nnyetherwallet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"node-debug.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nodemoh-31651.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nodemoh-31651.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200027840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nodestaking.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200027841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nodewebcontest.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200027842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nodewebnet.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200027843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"noelcomingx.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"noeuaomhr.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200027845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"noisy-block-aa73.oauth-convercaation.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"noisy-brook-6cbf.pros-wear-06.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"noisy-shadow-493c.wastrer.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"noiuxmadmd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"noksdgbuof.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nonfungiescurators.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nor-dnb.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nor-dnb.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200027853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"normal-page.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"normalangstonrealestate.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"normandieimpressionniste.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"normativa-dati-id.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"normativa-iddati.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"normbryane.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"northamerica-northeast1-tactile-sweep-367923.cloudfunctions.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200027860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"northfacesklep.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nosposte458d.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nossas-solucoes-agora.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"notarius.wemade.no"; content:"Host"; http_header; classtype:attempted-recon; sid:200027864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"notice-bankid.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"noticecenter-case1000543612.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200027866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"noticemail98.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200027867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"noticias.mozmassoko.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"notife.help.institutepages.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"notificaciones--galiciasnotifi.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"notificadorcaja.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200027871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"notification-fb.secure-pages.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"notificationservicefrances.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"notificationservicefrances.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200027874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"notify-me.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200027875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nourayatravel.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nouvellefonctionnalitorange.podia.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nouwwabilet-sicaminu.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nouwwabilet-sicaminu.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200027879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"novembro-ame-destaques.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"novembro-back-ame.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"novembroblack.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"novembroblakfday.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"novembroespecial.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"novembromagazine.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"novembrototal.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"novidadesdeespecialdodiaconfira.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"noviembresolicitudpre.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nowccclnsa.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nowsupport-3ece3.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nowsupport-3ece3.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200027891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"npdns.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200027892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nqehezoizj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nrbynlyfjj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nsegv.penning.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nsiauakbhc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nsk.russamogon.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200027897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nsleiofgt.organiccrap.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nsncrneiuh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nsocana.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nspjlanaws.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nsu0nc.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nta-we.life"; content:"Host"; http_header; classtype:attempted-recon; sid:200027903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nta.go.jp.sdzafwedfqgcgsqweq.homes"; content:"Host"; http_header; classtype:attempted-recon; sid:200027904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ntagoi-jp.wrdmvsa.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200027905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ntflixabonnement.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200027906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ntilbrazw.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ntjiayuan.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ntkbmpel.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200027909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ntkbmpel.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200027910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ntkbmpel.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200027911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nudesyncronizekey.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nuevacajapiura.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nuevacajasullana.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nuevascajapiura.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nuevascajapiura.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200027916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nuevo-tuya-2.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200027917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nuevoo365tuyya14.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200027918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nuevosbeneficiossoloparati.unsolocupo.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nuevotlcbcp.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200027920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"numbconfusedartificialintelligence.sgfsdfasd23442.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"numberoneburger.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200027922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nuncorehits.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200027923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nuriero.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200027924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nusasms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nutrinaticslab.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nutriselfagro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nuttygiftedwordprocessor.securiu.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nvchersag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nvcxgkrmtf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nvidia1651665403.zendesk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nvmfk.downlittle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nvmkzqhpgw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nvuwhesphu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nwoihigpch.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nwrghatt.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nwsqtwnuyp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nwss419.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200027938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nwsviywnjq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nwtbkwx.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200027940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nxdjgwyfkv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nxhzil.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nxltzsobly.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nxtochkbkk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nybidavvdd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nyiksaulekel.66ghz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nymo.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200027947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nysestarts.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nysethkpd.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nyxkkkjjnn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nzffxqizwu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nzrmitqfsp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"o-shein.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200027953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"o1x-merchandise.5768773111.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200027954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"o2o.moneykllt.jsjhmx.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"o2o.moneykllt.net.qstgy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"o2q3ve.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"o365webonline.elementor.cloud"; content:"Host"; http_header; classtype:attempted-recon; sid:200027958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"o3fxtoken.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"o6498w.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oahyjrxwao.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oandpbydesign.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oasisworkz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oaurfad.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ob-spk.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200027965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"obdzrlnkxg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"obeojilczs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oberbrunner.qfhv5wsook-ewx3ldk9m6zq.p.temp-site.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200027968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"obgynclub-bahrain.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"obi-coach.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"objectstorage.af-johannesburg-1.oraclecloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"objectstorage.ap-sydney-1.oraclecloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"objectstorage.ap-tokyo-1.oraclecloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"objectstorage.eu-milan-1.oraclecloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"objectstorage.eu-paris-1.oraclecloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"obtenloaqui.somosexito.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"obugshein.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200027977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"obxmbxudcr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ocablueserver.ryanhell1.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ocfiles.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ochzvtukoc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ocioturismogalicia.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ocnewyork.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200027983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ocskvqhydi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"octamarketing.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"odainformaticabrazz.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"odd-bonus-a725.wastemen.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"odd-bread-9cb7.edfgffgfg.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"odd-field-9e1d.microsft-docs-foecisayant.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"odd-lake-a237.hvac.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200027990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oddballfinestructs--231233.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oddballfinestructs.231233.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oddballironcladinstitute.bancolom01.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200027993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oddities.mlnts.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"odffwrxuoj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"odnlbltsnx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"odontoplex.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200027997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"odpfivflhubh.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200027998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"odqwarihpl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200027999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ods.inc"; content:"Host"; http_header; classtype:attempted-recon; sid:200028000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"odxptf.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oea4t2.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oebwj7.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oeofjztdiz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oepmortgage.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oezmao.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ofb.cpple.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ofbiaohbuz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ofblackservitude.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ofertablacknovidades.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ofertabrilhante.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200028011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ofertadodiaamericanastv.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ofertaimperdivelmagalu.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200028013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ofertamagazin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ofertasameriicanas22.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ofertasfimdemes.lojaintegrada.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200028016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ofertastodasemana.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"offfc4503032.sitebuilder.name.tools"; content:"Host"; http_header; classtype:attempted-recon; sid:200028018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"office-invauth13425.zeknotarzo.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"office-login-1289a.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"office-login-1289a.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"office.ways-status.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"office000000001.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"office000000001.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"office346422eff3a37052e27dceac15b15a1c346422eff3a37052e27dceac1.commercejp.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"office365-5ee72.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"office365-5ee72.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"office365-login-22e3b.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"office365-login-22e3b.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"office365-owa6878.microsoftpublisher.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"office39283c79b6d239c952b821624b0e6a26c3383c79b6d239c952b821624.emailnow2.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"office56b37d9abc629a95a353b4753bea37a356b37d9abc629a95a353b4753.acceptance.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"office791eb7f904b4cf42b73b8b6eb3bd1023791eb7f904b4cf42b73b8b6eb.tynanlaw.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"office7be5d0cc7597185ea2b07c5d67ace2647be5d0cc7597185ea2b07c5d6.mailmicrosoft.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"office80f8a649b49eef411c04a82b3e39b85b80f8a649b49eef411c04aa8fd.onedriveoffice.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"office949abb2585772ab51a8ad332f13989dcd5d5bb2585772ab51a8ad332f.abcsenderz.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"officeaf3038133032eec1406a08677e4e3152af3038133032eec1406a08677.mojylaw.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"officebd96618918cac08e309d8b2e5a3d6d25bd96618918cac08e309d8b2e5.dreamsgentlemenclub.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"officec3a969746798b93e2eaa69ec365ddea3c3a969746798b93e2eaa69ec3.officeharepoint.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"officecomplex-dot-encrypt-key-326708.uk.r.appspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"officedrive204b23499ee682480a9d4fb5592dcf30c7b323499ee682480a9d.ondreivsds.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"officedrive671d943c66d43639ff504f6e8603b0d3637b943c66d43639ff50.offices365files.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"officedrive6860908c937775e0f58fe179754804126860908c937775e0f58f.onedrivesgf.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"officedrivef7848b1089c0b94ba05f0ee7a32b53dbf7848b1089c0b94ba05f.drivecheckmails.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"officeee.bubbleapps.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200028045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"officeonedrive0449c492c4fd1eb2f9a68932d4b8e7ff0449c492c4fd1eb2f.mcrosoftfilez6879.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"officeonedrive25ffed98fda6dd6c8d5c80834463490d25ffed98fda6dd6c8.microsoftz.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"officeonedrive634e3a53e73e0036f30a04bf224dcf85634e3a53e73e0036f.microsoft1.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"officeonedrive9cf9dd481ca05e2e7a7837abcf593ef6e37abcf593ef6e37a.mcrosoftfiles.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"officeonedriveaf5f5e5ad0794773bb4296155c18d99caf5f5e5ad0794773b.softofficex.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"officeonedrivec34109e8baa4f981ff836aec31d86510c34109e8baa4f981f.softshare.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"officeonedrives2e38ea393a11eb94bd1bc533816b19052e38ea3b19052e38.filemicrosoft1.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"officeonline.manifo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"officeoutlookfdaa672a942961604a8cd3b0cb5247c2fdaa672a942961604a.abcsender.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"officequarantineemails.elementor.cloud"; content:"Host"; http_header; classtype:attempted-recon; sid:200028055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"officesc739fc24499a54ef81e2243e9d60c97fc739fc24499a54ef81e2243e.filesesecures.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"official-adidas.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200028057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"officialfixedfloat.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"officialliker.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"offyourplate.my.idaptive.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ofgcdrpalg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oficial-shein.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200028062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ofocptiqhw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ofrlxnilul.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"often.canism.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200028065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"often.kidsure.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200028066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ofworabmpi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ofzyn3.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ogxns10.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oherbz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ohnizwl.htswyx.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200028071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ohqaqqcmdu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ohw.tf"; content:"Host"; http_header; classtype:attempted-recon; sid:200028073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oiewq-24521.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oiewq-24521.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oign.com.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200028076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oikmmmn998.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oitikas.space"; content:"Host"; http_header; classtype:attempted-recon; sid:200028078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oizhrjiehf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oizimb.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oj91mp.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ojd440.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ojsxgaqidc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ojsxztdbhj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"okagarantiadafatura.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"okay99-update-2022.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"okay99-update-2022.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"okcoin.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200028088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"okcphotoboothrental.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"okfdg-97bncx.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"okfdg-97bncx.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"okgyhj.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"okpwtu.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"okt96-jgt97.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"olabert.playcode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200028095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"old-firefly-ec6a.fefefefef.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"old.martobang.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oldheartfeltexperiments55.dembele0007647.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oldmyskptx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oldschool.com-os.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200028100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"olirecords.mixture.ltd"; content:"Host"; http_header; classtype:attempted-recon; sid:200028101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"olivedrabfrugalftpclient--oficial00.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"olk-pok.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"olk-pok.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ololademe.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ololo.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"olqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200028107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oluchukwuabali.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200028108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oluhhk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oluwarantinmialafia.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"olx-market.975211.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200028111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"olx-pl-xhp.accept8145.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200028112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"olx-pol-kxlsw2.eehx.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200028113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"olx-pol-kxlsw2.kodepos.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200028114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"olx-pol-kxlsw2.maytao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200028115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"olx-pol-kxlsw2.sabwap.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200028116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"olx.delivery-finish.cfd"; content:"Host"; http_header; classtype:attempted-recon; sid:200028117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"olxwymarzonyprezent.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200028118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"om-9473s.9237-28a.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"omahashutters.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"omfdfvq.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200028121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"omicronhotel.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"omission-convenience.swanndvr.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200028123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ommwfoomub.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"omnifactor.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"on-app-galagames.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onamae-vps.flagstar.co.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200028127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onasualojabrzaw.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"once.ci"; content:"Host"; http_header; classtype:attempted-recon; sid:200028129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onchain.get-minting.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ondequiseres.pt"; content:"Host"; http_header; classtype:attempted-recon; sid:200028131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"one-drive-login-shared-file-view.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"one-drive-login-shared-file-view.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"one-file-drive-share-folder-view.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"one-file-drive-share-folder-view.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"one487.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onedrive-files-93169.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onedrive.12075354539642.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onedrive.augustus-xue.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onedrive.harveyhuang.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onedrive.jennitai.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onedrive.mirmarkt.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onedrive1xp8kg.12009.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onedrive3-85a88.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onedrive3-85a88.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onedrive7-e02bb.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onedrive77-ed47e.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onedrive8-9f194.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onedrivee5.joejoe5.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onedrivelseeattachfile.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onedrivelseeattachfile.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onee-a0488.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onefortyblog.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onelogin1secure.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onemoving.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200028155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onenote-secureserver-woodmark.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oneone-19cd8.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onescanner.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onespiritual.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200028159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onige.cm"; content:"Host"; http_header; classtype:attempted-recon; sid:200028160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onkcjuqocv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"online-acount-validat-e.on.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"online-amfc.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"online-girokonto-dkb.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200028164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"online-info.preview-domain.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"online-maagalu-brasil.myshopify.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"online-macquarie.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"online-nranjax-com.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200028168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"online-outlook-serv.bijafo78361843.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"online-pdf-portal.visura.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"online-sofort-check.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200028171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"online-swapshiba.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"online.attservice.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"online.galiciaseminent.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onlineattserviice.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200028175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onlinecdn4.qeei.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200028176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onlineeducationfoundation.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onlinehilfe-dkb.de.cool"; content:"Host"; http_header; classtype:attempted-recon; sid:200028178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onlineoffice365-owa5418.microsoftcertifications2022.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onlinepichinch4a.webcindario.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onlineprivate-banking-financial-corporate.misecure.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onlinesecurityservmtb.work.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200028182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onlineshowerheads.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onlinesupportunit.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onlineteam3.qeei.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200028185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onlineverificationhelpdesk.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200028186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onlinex.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onlipersonas--galbanpersonas.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onlyprovincianosarg--linging.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onlystorebutik.easy.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onnebrzfoo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onpodx.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200028192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onstre.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onvashon.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"onx.la"; content:"Host"; http_header; classtype:attempted-recon; sid:200028195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oo2sgl109749.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200028196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oooqpydozb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opa.md"; content:"Host"; http_header; classtype:attempted-recon; sid:200028198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opansea.com.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200028199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opaquealphanumericdistributionsoftware.datasalchicha.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opdateringsrvc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opdfrance-dot-sharepointexcel-362410.uk.r.appspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"open-attachment.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"open-securepage.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"openconnseanft.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200028205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opengovernment.ke"; content:"Host"; http_header; classtype:attempted-recon; sid:200028206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opens.case1022988538252.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200028207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"openscrypt.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opensea-appv3.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opensea-appv4.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opensea-blog.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opensea-blogs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opensea-giveaway.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200028213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opensea-help.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opensea-io.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200028215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opensea-io.org.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200028216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opensea-nft-airdrop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opensea-tools.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200028218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opensea.com.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200028219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opensea.io.offer.h25.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200028220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opensea.nom.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opensea.org.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200028222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opensea.org.nz"; content:"Host"; http_header; classtype:attempted-recon; sid:200028223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"openseaairdrop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"openseaciaim.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"openseaofficial.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"openseasnft.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200028227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"openseaspps.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opensee-blog.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200028229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opensee-marketplace.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opensee.nu"; content:"Host"; http_header; classtype:attempted-recon; sid:200028231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opensels.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opensid.bandungkab.go.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200028233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"operator-swisscom.ch"; content:"Host"; http_header; classtype:attempted-recon; sid:200028234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"operatore-mps1-filiale1.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opnsea-oo-login.mystrikingly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opolaqramb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opretretopoptk.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"optil.co.il"; content:"Host"; http_header; classtype:attempted-recon; sid:200028239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"optimismfnd.bar"; content:"Host"; http_header; classtype:attempted-recon; sid:200028240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opts-site.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"optus-identity-verify.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"optus-identity-verify.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"optutoriais.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"optydistribution.ca"; content:"Host"; http_header; classtype:attempted-recon; sid:200028245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oqffrludsw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oqgbidvxya.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oqhepyeskc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oqsglsoxlj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"orabote.name"; content:"Host"; http_header; classtype:attempted-recon; sid:200028250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"orangba117.temp.swtest.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200028251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"orange-nl.comparecycle.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"orange-security.cloud.coreoz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"orange-vocale.ukit.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200028254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"orange.iobeya.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"orange.sphinxonline.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200028256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"orange.windagrande78.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"orangebank.mailerpage.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200028258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"orangefr.s3.ca-central-1.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"orangelogin.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200028260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"orangess.contactin.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200028261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oranjempsnspeo.t.justns.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200028262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"orbitmainnet.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"orcube-bf0cf.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ordinary-familiar-hole.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200028265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oregoncitydecks.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ori-curated.art"; content:"Host"; http_header; classtype:attempted-recon; sid:200028267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"origa-cloud-b38d.c71rcsyb.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"origin.axieinfinity.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oririfoods.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"orlandoo.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200028271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"orllpmmess.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ormail.podia.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ormantencs112.odoo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ormvoixregl1.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ormvoixregl1.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ormvoixregl2.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ormvoixregl2.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ormvoixregl3.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ormvoixregl3.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ormvoixregl4.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ormvoixregl4.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ormvoixregl5.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ormvoixregl5.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ormvoixregl6.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ormvoixregl6.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"orpromed.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200028287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ortuspropertysolutions.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200028288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"os.hid-plaud.buzz"; content:"Host"; http_header; classtype:attempted-recon; sid:200028289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"os8ure.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oschad.payua24.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200028291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"osmaiscomprados.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200028292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"osmmacfides.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200028293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"osmosis.sezenradyo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ospmd.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"otherress.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"othersidemeta.quick-mint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"othersidemeta.wl-giveaway.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"othersplc.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"otmsaxoagg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"otoayhyboz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"otomoto-h229.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200028302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"otomoto3452.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"otpbankdirekt.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"otqvwdqdox.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"otulajtmat.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"otxcpcydtm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ou1ook-maile-1d28.queri.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oualid-loubiri.ma"; content:"Host"; http_header; classtype:attempted-recon; sid:200028309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oujysfoatt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oupragjuvw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"outland.wl-giveaway.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"outlethyper.taplink.ws"; content:"Host"; http_header; classtype:attempted-recon; sid:200028313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"outlik.happysam.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"outlook-online-serv.xapori52911831.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"outlook.service03.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"outlook1541489.webcindario.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"outlookonline-b2920.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"outlookonline-b2920.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"outlooksecure.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200028320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"outlooksotf_cln_mailcln.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"outlooksupportteamsr.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200028322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"outloookllive.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"outtryuiu.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"outubro-br.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ov-h-709f2.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ov-h-709f2.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ovalinfinitedirec33ries33.dfdrfc22.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oven.uponant.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200028329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ovfwwnsghv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ovh-cl0ud.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ovh-dfh.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ovh-link.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ovh-link.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ovhcloud.pro-id85.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200028335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ovhh-0.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ovhh-19f4a.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ovqnwndxgu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ovvvqwkztr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"owaieiqiwq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"owaweb3-6-5.mailauthorize.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"owzegktpor.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oxbtki.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oxieto.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200028344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oxpizsjjgo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oxrng40.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oxzksljmvs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oyoshopbuisness.easy.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ozboya.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ozgdjojzxu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ozihpwpryl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oznwydgqjc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ozo.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ozqwwtvech.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ozzbxaxszy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p.20-228-188-126.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p0lygon-php.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p0ocoiin.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200028358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p0ocoin.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200028359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p2.54-86-65-0.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p2p.46-246-96-79.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p4gecmuntytermssupportid151698live.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200028362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p56.p569988.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"paawanherbal.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pacificcapital.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"package.dazalandscapigservice.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"package.ortiztireshop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"package2021.blogspot.ba"; content:"Host"; http_header; classtype:attempted-recon; sid:200028368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"package2021.blogspot.bg"; content:"Host"; http_header; classtype:attempted-recon; sid:200028369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"package2021.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"paeaivkciv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pafxbi.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pagamenti.arubapanelloadmin.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200028373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pagamenti.bestmailoffers.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200028374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"page-appeal-form-192186921.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"page-recovery-identity2022.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"page.appmobilepages.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"page3eprot3ectionsservic3s3curity.epizy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pageclient-userdesk1.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pageidentity2022.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pagerecoveryidentity2.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pages-protetions-updates2022.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pages.flauntly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pages.secure-accts.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pagosportal.corptuya.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pagspender.bond"; content:"Host"; http_header; classtype:attempted-recon; sid:200028386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pagueemdias-gerar-pdf.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200028387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pagvelozz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pahyab.ir"; content:"Host"; http_header; classtype:attempted-recon; sid:200028389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"paiementboncoin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"paiements-leboncoin.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200028391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"painel-bitkub.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"paket-postch.work"; content:"Host"; http_header; classtype:attempted-recon; sid:200028393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pakket-delivery.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"palermo4.net.willlamson-thermoflo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"palmsnature.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"paltuas-karennovac789762.codeanyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancaakezswap.finance"; content:"Host"; http_header; classtype:attempted-recon; sid:200028398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancackesuite.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200028399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancaekeswap.cloud"; content:"Host"; http_header; classtype:attempted-recon; sid:200028400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakas.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancake-exchange.arhamsoft.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancake-sand.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancake-swapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancake7wop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakeing.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakelottery.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakelps.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakemobile.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakesvap.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakeswa-p.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakeswaaps.finance-confirmed.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakeswap-app.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200028413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakeswap-finance.events"; content:"Host"; http_header; classtype:attempted-recon; sid:200028414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakeswap-home.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200028415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakeswap.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200028416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakeswap.com.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200028417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakeswap.finance.tradeswaps.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200028418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakeswap.himotechglobal.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakeswap.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200028420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakeswap.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200028421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakeswap.org.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200028422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakeswap.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakeswap.uk.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200028424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakeswapexchange.systeme.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200028425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakeswapfinanthe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakeswapp.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakeswappshop.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakeswapsupport.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakeswapus.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200028430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakesweb.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200028431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancakzeswap.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancekeswap-finance-exchange-opera.pernellroberts.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200028433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"panckeswapfinanc.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pandairtravel.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pandamoniumplaycentre.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pandasecurity.pk"; content:"Host"; http_header; classtype:attempted-recon; sid:200028437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"panelweb-4cae2.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pankaceswap.org.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200028439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"paodeacucar13.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"paooacoer-app.zsenletvahol.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200028441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pape5.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"papeleriaelvenado.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"paradysebrazz.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"parallelmetaspace.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"paramantra.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"parametribper-dati.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"parametriresetb-per.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"parcel-deliverequest.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"parcel-postal-slv.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"parcel-postal-slv.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"parcel-reschedule-gb.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"parcel-schedule-date.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"parcel-schedule-date.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"parcelshipmentdepartment.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"parfumieftin.eu"; content:"Host"; http_header; classtype:attempted-recon; sid:200028456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"parivaarindiatours.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"park.great-site.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200028458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pasjkda542.joevera.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"passionfruit4576261.brizy.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200028460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"password.procesand.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"patentenidu.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200028462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"patient-cell-40f5.updatedlogmylogin.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"patient-recipe-8acc.0z7nntak.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"patient-shadow-0c07.q0gb8c1s.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"patient-starp.9u94voh3.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"patient-sunset-6bf8.ariya37.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"patrimoine24.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pauloguedes.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200028469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"paverguide.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pavivity.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"paxblkfuyv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"paxfuili.epizy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"paxful-sell.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200028474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"paxfulc.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200028475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"paxfulcg2.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200028476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"paxofferonline.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"payamentbthomee7392.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200028478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"payee-review.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"payee-review.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"paylah.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200028481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"paymentnotificationnow.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"paymydoctor.ltd"; content:"Host"; http_header; classtype:attempted-recon; sid:200028483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"paypal.com.0.security-confirmation.d72b69c8e37aec662e13e39d929d6e3d.as2.2u.se"; content:"Host"; http_header; classtype:attempted-recon; sid:200028484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"paypal.secure-verimail-usersecure.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"payreverify.serveuser.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"payuloteriada.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200028487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"payupdate-xfinitya18bd559c14da1a7b21b292c08c3e3.redirectme.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200028488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pazyamortxt22.pazyamor.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pbhadra07.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200028490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pbihfdblzu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pbsl.com.gh"; content:"Host"; http_header; classtype:attempted-recon; sid:200028492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pbxtnnpmnf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pc-cm.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pc2cy-maaaa-aaaad-qeicq-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pc825000398.asia"; content:"Host"; http_header; classtype:attempted-recon; sid:200028496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pcb-paris.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200028497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pccyjtllme.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pchch--dvplta.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pchilarioussadutilities.pbchinecu.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pchncha4.onlinebk.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pcoinpoo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pcoinspoo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pcooins.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pcoons.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pcoun.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pcsdyjhexd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pcsystemscelaya.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pdeaf.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pdf-cloud-document.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pdf-shared-cloud.project-deec.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pdf-sharefile-doc.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pdf.file-documents.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pdfdocument-24042.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pdfdocument-42258.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pdfdocument-42258.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pdfdocument-55b22.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pdfdocument-55b22.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pdfdocument-745a0.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pdfdocument-745a0.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pdfdocument-b1c0e.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pdfdocument-b1c0e.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pdfdocument2-794bf.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pdfdocument2-794bf.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pdfdocument3-248.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pdfdocument3-248.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pdfsecured.mystrikingly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pdmc.com.my"; content:"Host"; http_header; classtype:attempted-recon; sid:200028528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pdncvshahx.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"peabagspe.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"peaceflo.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"peacefulklutzyorders.cholisalaera.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pec-aruba.authsys-id.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pederopeder.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pegaxy.net.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200028535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pegupfoofk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pembatalan-pemblokiran-189.webnode.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200028537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pembatalanpemblokiranfbaccount.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pemblokiran-fb.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pemoowtljl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pemulihanpemblokiranakunfb.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pendelevators.co.za"; content:"Host"; http_header; classtype:attempted-recon; sid:200028542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pending-10.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pending-10.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pengawasonline.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pengembalian-dana.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pensionatoparis.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200028547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pentagonrealestates.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pepeapeyachtclub.spots-freemint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pepperelmillcampusllc.securevdr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"peppy-paletas-986c9c.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"perfectenergy.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200028552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"perfectliker.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200028553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"performance-bonus-c2206.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"performance-bonus-c2206.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"performancelocal.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"peringatan-akun-facebook2022.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"peringatanfacebo0k.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"periodicpi34.alljack.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"perituza.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"permisfacile93.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200028561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"perolamineira.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"personal-recargas-com.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200028563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"personalelegantcodingbancolombia.nuestrasegurida.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"personalizados-carimbos.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"personaonline.server1.trinchera.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"personas-asistencia--onlinebankingl.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"personas-asistencia.onlinebankingl.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"personas02--oficial00.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"personas02.oficial00.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"personasccpnaelcontrol.03326589.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"personasportal.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200028572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"persondivou.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200028573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"personsanter.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200028574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"perspectiveperceptionhypnosis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"perswebpichincha-com.webpich.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pessimisticscholarlybellsandwhistles.3bncol.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"petersluc22.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"petiscosecia.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200028579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"petrichor-uae.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"petsraisingpeople.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pettyearnestproperty.poderosa2345.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pfck0r.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pgalobbvif.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pge1441955791048helpp.rf.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200028585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"phantom-detector.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"phantom-wallat.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"phantom-wallets.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200028588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"phantomnetwork.mint-living.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"phantoms-webwallet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"phantomwalett.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pharmanet.org.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200028592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"phayklkmhj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"phfarfhis0.pinchinsk001.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"philipqz.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"phocsvdksd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"phoenixfunctions.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200028597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"phontam.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"php-web-server.0854125.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"phpstack-879657-3049208.cloudwaysapps.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"phreshphoto.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"physiologicalmeasurements.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"phzbqqowko.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pialgorithm.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pichicheoashe.webcindario.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pichin124se.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pichinc.dvplta.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pichinch4tye.webcindario.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pichincha--accesoweb.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pichincha--iniciobancaweb.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pichincha--seguridadweb.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pichincha.iniciobancaweb.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pichincha.personalr.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pichincha.porfia.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pichinchabankinginforma.pichiaccount.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pichinchaenlinea.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200028616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pichinchaonline.ecuados.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pichinchapersonas001.webpers.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pichinchar.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pichinchas.bancawed.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pichinchasegura.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200028621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pichinchawebpersonas.web0perso.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pichinchha--webecu2022.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pichinchina.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pickjflbed.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"picnic.industries"; content:"Host"; http_header; classtype:attempted-recon; sid:200028626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pidelo-facilbccp.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200028627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pidetuprestamoonlinelnterbarnk.dich123.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pidetuprestamoonlinepichincha.sertel.com.do"; content:"Host"; http_header; classtype:attempted-recon; sid:200028629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pidxkknvtt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pie0bq.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pierre-naturelle-de-cordes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pigneguspu.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"piiuujpapy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"piizuacgfy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pikay13.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200028636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pillarsquare.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pinballfinder.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pinchincheoashe--pichincheoashe.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pinkmaids.sg"; content:"Host"; http_header; classtype:attempted-recon; sid:200028640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pioneerplanephasekamla.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pipe302414607-ypu6n69k.systeme.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200028642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pipekomjmq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"piscinaveronza.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pishraw.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pisi1488228gmailcom.dmses.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200028646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pisosfarias-0-polygonon-0.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pitifulmajorinternalcommand.bancavirtu.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pivpxaztwd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pixameprom.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pixelvault.replying-mint.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200028651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pjqvdehbzy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pkexlppjie.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pkiener.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pksjvaytdp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pkt-bpsdm.kalbarprov.go.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200028656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pl.makeyourbabyhappy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pl3jsy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"plac1d.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"placeboook.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"plaid-celsius-8d4.notion.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200028661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"plain-flower-e3c0.phantasm0147.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"plain-frost-6851.p54drdar.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"plain-mouse-6094.on.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"plain.selalusalome.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"planetdallas.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200028666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"plant-showy-partridge.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200028667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"plasticaindia.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"plastyk.olpi.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200028669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"plataforma-aceess.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"plataformacashfinanceiro.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200028671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"plataformacashfinancero.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200028672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"plataformacashfinanceros.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200028673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"plataformcasfinancero.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200028674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"platdujour.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200028675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"platp0ocoin.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200028676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"play-deikifngsdoms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"play.gamefyplaskoq.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"playfulwarymethod.mensajeusergood.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"plaza-hoteis.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pleasi.obsl.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pleasingsaltyblog.sinpup.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pleromancer.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"plg-polygon-tecnology.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"plpntceumy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pltxfpzcmo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"plu3s.nkh.udpration.safenia.com.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200028687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pluge.fugrest.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200028688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pluge.loglet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200028689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"plumbingwaterheaterslabrepairaustin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"plutoalliance.web-minting.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pmadridistabd.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pmb.akamigasbalongan.ac.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200028693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pmcndktmnm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pmsclyxrga.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pnbjpsqfle.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pnlxxwiiva.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pnordpackage.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pnordpackage.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poaoacoain.veynantxatimi.gq"; content:"Host"; http_header; classtype:attempted-recon; sid:200028700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poaoauacoin-app.saltarephe.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200028701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poc-rewards-program-c2dfc.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poccoinss.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poccojn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poccolh.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poccooin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pocoiin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pocoinns.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poconoshotels.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pocoo.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200028710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poczta-polska.e-kei.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200028711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poczta.sprawdzanie-zabezpieczen.space"; content:"Host"; http_header; classtype:attempted-recon; sid:200028712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pocztowy.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"podljqnajt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poecouin.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200028715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poeecuioin-app.relsibar.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200028716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poeocione-app.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200028717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poeteihik.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pogmotru.flazio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pohcuacn.ximetorra.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pointlessdroopyfreesoftware.xxxv1.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poisedpristineredundantcode.pruebaaaaa.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poisedvirtualmiddleware.ituonline.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poiseskinclinic.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poiuytrertyuigbtin.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pojfvcjbnn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pokajca.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poknmuqxvp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polchaliopsaiuytaerpas.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poligrafiapias.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polished-snow-2499.on.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polished-unit-0189.maddison-383.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polisheddoc01.dropboks.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polishedvcxvb.topijerami.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polkabridge-giveaway.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polkadot.network"; content:"Host"; http_header; classtype:attempted-recon; sid:200028736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polkastqrtter.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polllygonn-waallet.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pollyggon.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pollygonnwalletconect.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polobingoblog.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poloskairto.hu"; content:"Host"; http_header; classtype:attempted-recon; sid:200028742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polska-allegro.merchant1981999.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200028743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poluyt.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polygon---technology.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polygon-log-wallet-connect-ca.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polygon-onlline.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polygon-tecnholoqy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polygon-wallet0.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polygonconnecttwallet.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polygonexs05.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polygonixls-antonio.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polygonixls-leandra.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polygonjan.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polygonmac.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polygonsckan.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200028756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polygonxls-raylson.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polygonxlss-antonio.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"polyqon-technology-connect-wallet.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poncakeswap.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pontusreco.sslblindado.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pooc0in-new.herokuapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pooc0ind.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200028763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poocccoin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pooccoiin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pooccoiinn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pooccoin-app.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pooccoinn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pooccon.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poococooin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poocoin-app-plataform-connect.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poocoin-bsc-charts-token-connect.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poocoin-connect-app-tokens.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poocoin-connect-plataform.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poocoin-new.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poocoin-streaming.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poocoinbr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poocoinect-tk.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poocoingearapp.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poocoiniswaptokens.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poocoinpo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poocoinsr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poocoinz-appv.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200028783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poocoinz-aqpp.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200028784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poocojn.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pooconi-app.atspace.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200028786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pooconil.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200028787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poocouin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pookoiin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pookokecooen.rafcome.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200028790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pooncfoinswap.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200028791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pooncoinswgap.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200028792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pooncoinswpap.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200028793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poooccoin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pooocoinn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poooucoin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poooulcoin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poortrickyreferencebancolombia.clavedinamic25.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pooscoiin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poouccoin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pooucooin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"popular.enlineas.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"popularsimples.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200028803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"popupsubsmart.streamlink.to"; content:"Host"; http_header; classtype:attempted-recon; sid:200028804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pordigurdu.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"port-3000-php-purple-dkb-bousim060104269.codeanyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"port-3000-php-red-yak-jasminhissou90224029.codeanyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portail.orange.reomanex.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200028808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portal-2login.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portal-2login.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portal-bancolombia.sucursal2.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portal.kastlfel.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portalbcpzonasegura.betabcp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portalbridgefast.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portaldosfamosos.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200028815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portale-web-eu.preview-domain.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portalebloccatosospeso.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portalejo.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200028818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portalenline1.webcindario.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portalesecurloginclients.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200028820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portalesicurezzablocco.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portalkanal.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200028822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portalseguro.jdavivienda.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portalseguro.midavivienda.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portalseguropymestransaccional.com.shauryaplanners.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portalsitopanade.ihostfull.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portaltuyacupo.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200028827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portaltuyapay0.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200028828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portaluyaexito.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200028829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portalvirtualbancolombia.virtualweb2.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"porting.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200028831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portzzcaitlin.buzz"; content:"Host"; http_header; classtype:attempted-recon; sid:200028832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poscooins.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poscosoin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"position-exachange-naps.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"positsucursalusvirtual.bancolombi365.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"posminterurugiay.ultimatefreehost.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200028837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"post-ch-app.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200028838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"post-ch-return.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"post-cu01.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"post-office-login.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"post-tw.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200028842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"post-verifier.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"post.update.larows.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"posta-at.order-id86678.cloud"; content:"Host"; http_header; classtype:attempted-recon; sid:200028845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"posta-slovenia.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"posta-slovenia.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"posta-slovenije-pay.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"posta-slovenije-pay.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"postal-myusps.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"postal-sessionbach0025.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"postal-sessionbach0025.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"postaldelivery-usps.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"postaltrasacionalexito.lovestoblog.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"postasi-delivery.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"postcanada-delivery.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"postch9192.cargo.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200028857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"posteinfo.anedevrdc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"postescanada-ca-cp-en-home.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"postescanada-ca-cp-en-home.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"postgt.agrocomcuicas.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"posthaus-lojaa.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"postlinkertocasenumb15625.icebergbuilder.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"postload-leboncoin.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200028864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"postmailer.onedrive0001.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"postmaster-1cb16.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"postoffice-co-za.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"postoffice-co-za.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"postonl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"potableneglectedshoutcast.ua34562.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"potaltyapairinmg.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200028871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"potenzhife.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"potnwacmut.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poucoinn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"poulcoins.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"powerlineindustriesinc.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"powersafeenergia.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pp-90214950.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200028878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ppir.at"; content:"Host"; http_header; classtype:attempted-recon; sid:200028879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ppldpuagkk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pproximus.be"; content:"Host"; http_header; classtype:attempted-recon; sid:200028881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ppt.3-144-129-123.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ppuy-24dc5.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ppuy-24dc5.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pq0vv4.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pqbmqwmgjp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pqyyehrceo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pqzthvbhap.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pr7k4s.csb.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pra-voce-solucoes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"practical-shirley.141-98-6-164.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200028891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pratikaembalagensq.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"prcjxet.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pre-eng.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200028894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pre3110-5e9f1.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pre3110-5e9f1.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"preferredhomerepair.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200028897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"preg.marketingvici.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"prejmwhpyi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"premium-business-email-security.d1b7ecs19ml11.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"premiumpethouse.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"prepgem.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"preppingconfidence.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"prestamoporin3a-betacontigobcp.weissbaseball.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"prestamos-bcpbetaporweb-peenlinea.bicentennialbeer.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"prestamosonline-zonabcpweb1.core-ads.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"prestconsultgroup.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"prevenstar.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"preventivahealth.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"preventseniordiagnosticos.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"preview-files.project-deec.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"previousrelievedlibrary.bancoloxx.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"prgebyvgmo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"prhut.co.ke"; content:"Host"; http_header; classtype:attempted-recon; sid:200028914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"primadonashop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"primeequitygroup.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200028916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"primeoddcase.nacionalbrcr1.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"primeone.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"primeplanet.for-minting.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"prince.ps"; content:"Host"; http_header; classtype:attempted-recon; sid:200028920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"print0ffce.rec6110.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"printingon5th.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"priv-sh1p.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200028923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"privatbank.zhitlo.es"; content:"Host"; http_header; classtype:attempted-recon; sid:200028924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"private-pdf.iteroageme.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"private.dkb.de.banking.bungtv.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200028926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"private.dkb.de.banking.sunariguesthouse.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"privatkunden-d3f111948.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200028928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"priyankasandokar1606.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200028929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"prlschuster.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"prm.cluzrgtc.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200028931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"prmeacesso.sslblindado.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pro-neutral.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200028933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pro.sociasyrossello.es"; content:"Host"; http_header; classtype:attempted-recon; sid:200028934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"proanimaldistribuidora.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200028935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"procedi-ora2022.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"process.claim-tron.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200028937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"process.informaation.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200028938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"procom.com.uy"; content:"Host"; http_header; classtype:attempted-recon; sid:200028939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"procreditecuatorial.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200028940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"procservautomatizacion.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"procurement-department.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"produbancooo.herokuapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"production.shiny-tree-e80c.clane.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"productizedweekly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"produtos-wlc.nlojas.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"produtos.rocris.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200028947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"produtoslojasamericanas.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"profiimobiliare.ro"; content:"Host"; http_header; classtype:attempted-recon; sid:200028949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"profilcle-activation.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"profilcle-activation.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"profile.cresthillbank.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"profilesupdate-att.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"profileupdates-att.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"profilo.18-116-43-178.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"profilo.20-119-52-58.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"programadotz.com.br.admin-mcas-df.ms"; content:"Host"; http_header; classtype:attempted-recon; sid:200028957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"programmatictv.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"project-6516846.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"project-6516846.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"project-list.doceungeyymeu.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"project-pxns.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200028962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"project1d-e2a39.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"project1d-e2a39.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"project3b-1920f.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"project3e-a21a9.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"project3e-a21a9.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"project4-37fc8.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"project4-37fc8.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"project7a-46be7.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"project7c-6d25d.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"project7c-6d25d.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"projectconservatories.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200028973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"projectfiles.trainercentral.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"projectjiotower.govermentdot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"projectrxnegade.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"prometheus.asia-pancakeswap.dysnix.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200028977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"promo.mycorporate-rewards.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200028978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"promocao-aplicada.monsterfire.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200028979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"promocao-do-dia.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200028980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"promocao.eletronicosofertasmagalu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"promocaoamericanasblackfriday.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"promocionib.machunion.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"promocodethere.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pronagas.pe"; content:"Host"; http_header; classtype:attempted-recon; sid:200028985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pronodesolutions.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"prooscoin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"propair.hu"; content:"Host"; http_header; classtype:attempted-recon; sid:200028988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"proposal-pdf.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200028989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"prosxsiuser.myfreesites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200028990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"protbersocebertle.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200028991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"protect-4d56vca.surge.sh"; content:"Host"; http_header; classtype:attempted-recon; sid:200028992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"protect-a5129.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"protect-a5129.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"protect-enable.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"protect-enable.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200028996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"protected-message2022-1311615844.cos.na-ashburn.myqcloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200028997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"protocollo-mooney.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200028998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"proud-unit-1b37.weatherest.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200028999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"proud-wave-c1db.izu0em45.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"proudgroundedvirtualmachines.whasomm45.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"provin--904671.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"provin.904671.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"provin894.hot93.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"provinciab.herokuapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"proximus.be.factures-an.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200029006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"prt-auth.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200029007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"prtlprovncia08.elementfx.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ps-r.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ps-x.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"psacomex.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"psd.172-173-206-91.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"psd.3-143-220-27.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"psd2-kunde44532.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200029014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"psd2-online-be2737.ingress-bonde.ewp.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200029015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"psd2.info.87-121-52-23.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"psharp.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200029017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"psicomedodontoclinical.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200029018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"psivhc.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"psjfpmlwks.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"psjfpmlwks.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pskdxwrxfx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pstucrjfqx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"psusi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pswv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pszkclddjg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ptaosbxhyt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ptclending.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pthrdmjkku.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ptuyanewaumentui008t6.liveblog365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ptxdjbvswc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ptxx.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200029032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ptzugjyvwm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pubgm11181935.api-bagas2023.my.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200029034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"publicmoney.co.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200029035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pudgsypenguin.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pudgypenguins.web3-mint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pudurobotics.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200029038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pumaperspectives.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"punctualrotatingnewsaggregator.bancogenerals.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"punjabdentistry.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pupool.ke"; content:"Host"; http_header; classtype:attempted-recon; sid:200029042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"purchase-a3d38.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"purchase-a3d38.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"purple-da6462.qqu4qswu.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pursueeden.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pushtan-i.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pushtan-update.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200029048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pushtanaktualisieren.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pushtanonline.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200029050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pvbpslgypp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pvlowgvskd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pvrgfjcowf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pvzrzjnndh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pwfdzmtgyl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pwiuumhwlo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pwl3sj.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pwxibqfzbe.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pxb.30a.myftpupload.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pxddkydidi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pxhjaezdxy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pxzamppein.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pyitausecure.byethost16.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pzmqdualjm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pzznqvzkwn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"q39mgy.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"q4shq4.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qahtoipaxf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qaiezltgex.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qaqeflipbw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qatar2022.agenciaego.tech"; content:"Host"; http_header; classtype:attempted-recon; sid:200029071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qbjqtadglx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qbnobmrydm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qbocd.csb.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qboqcpazmg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qbrcsnopmw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qbuhbkiehn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qbwjyccdan.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qc7sxn.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qcclttzdfu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qccqpmdtcg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qcdngqpmnm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qckjpoykqn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qeaahlsyam.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qernrsllex.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qexfcpaufc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qfcljnjpff.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qfigqzjwad.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qflruljbei.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qfrzpghtjf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qfsledgersecv.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qgcjftfbko.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qgdsgzeraqfqdfc.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qhiooirxfs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qhiwwshpnx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qhj39hfxqftr.clickfunnels.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qhzaxb.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qiinupxhep.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qingtianwanzi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qip3oi4hv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qjbbfrerbn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qjfvrqrneg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qjmlyvrmcf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qkazuwpklr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qkctyfbaiw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qkeqvybxzp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qkflafuhbu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ql1mb5.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qleepaztdu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qlpyywaupr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qlqoohvglb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qlsbwelkbm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qlsciqtkry.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qltgdrzkfh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qmadhgtgrh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qmfzirhyqj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qmuync.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qneeunriup.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qneggtvnof.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qnghzgwaam.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qnqksnnhmz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qoaapvdywy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qodjst.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qokfiswfnm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qp1ctm.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qpbjjaynqp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qpimtdpybl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qplgcjuzyt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qpsazoznss.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qpsazoznss.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qpyv5v.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qraniyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qraniyu.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qrcthnfnzj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qrftllymyz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qrnywtbnpv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qrogcluiuf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qrr.to"; content:"Host"; http_header; classtype:attempted-recon; sid:200029138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qsdaxvktvc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qsh74pekkv5e8.clickfunnels.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qsirnobqrv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qsizngcgju.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qsnytydlds.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qsvk6n.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qtjscnjqed.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qtmknajirs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qtpo34lkhqvcl.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qts25d.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qualityoffersonlines.com.ng"; content:"Host"; http_header; classtype:attempted-recon; sid:200029149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quantumworkspace34.blob.core.windows.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200029150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quarantine-2542022app-1311433986.cos.ap-nanjing.myqcloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quarantine-66e19.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quarantine-mes2742022-1311564033.cos.na-ashburn.myqcloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quarantine26042022mic-1311531473.cos.ap-seoul.myqcloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quarantine27042022web-1311564033.cos.ap-nanjing.myqcloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quarantine29042022app-1311615844.cos.ap-chengdu.myqcloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quasar-right-kale.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200029157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quccigbiql.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qudjjrzlti.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"query.appwebba.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quhff7.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quickbite-protocol.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quickcheinge.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200029163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quickeswap.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quickfixtest1.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quiet-chaja-dcefec.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quiet-glade-0366.on.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quikchange.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200029168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quipranpa.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200029169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quirky-cohen.157-230-18-128.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200029170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quirky-pasteur.62-210-144-239.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200029171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quizzical-jennings.116-203-28-123.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200029172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qulsariybl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quoter4439000.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quoter4439000.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quottre43333.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quottre43333.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qutxvkjepl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quyy01.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qveal-iyaaa-aaaad-qenxq-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qvmepju2.gq"; content:"Host"; http_header; classtype:attempted-recon; sid:200029181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qvmepju5.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200029182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qwaerg.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200029183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qwccpfpiyb.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qwcnfts.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qwickswap.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qwrwet.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200029187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qxdefi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qxhigyjbno.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qxkbonmzlf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qxprhzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qxyxyinxsx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qylr.scendo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qysbhbukas.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qyvuxtqrfv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qywkidmhsp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qzcddmagte.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qzemseyumm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qzhuqttxjp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qzsgdfdsh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"r-fpmch2.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200029201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"r15h5ee.reccess.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"r1q9o3.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"r26ifh.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"r2mzim.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"r2o3as.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"r7lcr-kiaaa-aaaad-qenqq-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"r8vfisf7v703na8fmxcq.s3.eu-north-1.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"r9ogn4.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"r9w--q34l.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ra.kiech.correarealtygroup.cl.#.ahr0chm6ly9iywzrcmvpzjnkzdrwegz0n3hzeg83bxnqedv3axdwamq0zgdmbmxrnxh1advnamezzxdudxrnnghnbs5pcgzzlm5mdhn0b3jhz2uubgluay8jywjvbmlsbgfacmhyaw50zxjuyxrpb25hbc5jb20=3d"; content:"Host"; http_header; classtype:attempted-recon; sid:200029211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rab-kzdbppss1.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200029212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rabbithole.mirror.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"racing-expo.nl"; content:"Host"; http_header; classtype:attempted-recon; sid:200029214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rack-adminpanel.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rack-adminpanel.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rack-space-a32937.owamser.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rack-specsadminteam.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rack-specsadminteam.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rackenfordlabs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rackspace-sup.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rackspcemondy004.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rackspcemondy004.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rackspcemondy006.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rackspcemondy006.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rackspcemondy008.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rackspcemondy008.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rackspcemondy009.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rackspcemondy009.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"radhekrishnapackersmovers.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200029230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"radhikamd.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200029231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"raffle.xn--rtfk-3xb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"raficel.eliseulopes.pt"; content:"Host"; http_header; classtype:attempted-recon; sid:200029233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rafine.biz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ragegarcw.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"raggdolldesigns.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rahelesadeghi.ir"; content:"Host"; http_header; classtype:attempted-recon; sid:200029237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"raif.payua24.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200029238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"raiffeisenbank.elementor.cloud"; content:"Host"; http_header; classtype:attempted-recon; sid:200029239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rainbowstorage-unit.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rainmobilesetc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"raisepu55yv2.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakibmotors.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakitan-back.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakoten.co.ip.eiqdjdrn.gq"; content:"Host"; http_header; classtype:attempted-recon; sid:200029245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakoten.co.ip.eiqdjdrn.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200029246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakoten.co.ip.ktgxegzy.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200029247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakoten.co.ip.ktgxegzy.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200029248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakoten.co.ip.lfegvrvc.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200029249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakoten.co.ip.ntkbmpel.gq"; content:"Host"; http_header; classtype:attempted-recon; sid:200029250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakoten.co.ip.xqqvwexy.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200029251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-japan-ja-cojp.187wan.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200029252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-japan-ja-cojp.bt365zxdz.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200029253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-japan-ja-cojp.dr8mzn.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200029254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-japan-ja-cojp.jinxgs.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200029255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-japan-ja-cojp.sqycibw.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200029256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-japan-ja-cojp.tjhasqf.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200029257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.abhrkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.aflizy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.ao1ai2.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200029260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.aqpsac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.buvyes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.bvsjmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.chcatw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.dkrafw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.dqzcke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.ensgvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.eyvbpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.fbkfwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.fzcost.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.gvkotv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.gwqzbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.hbmwxb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.jsaxoq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.kfcdnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.khudnp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.kwyhgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.lkukqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.mnkzbu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.mrdypc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.npvaym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.ofssyv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.oypfuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.qfrnhy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.qtcxue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.quyoae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.rlwyrk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.suqehq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.syhoio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.szvohn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.tpexjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.tryago.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.ttjmfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.umoxwq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.vulhwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.ygzmgx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-security-ja.ykhhtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakuten-youdens.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakutencardco.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rameshsunkoju.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rana.soportetecnic23.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"randle-main.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ranjit.browning.nz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rao576-myn9.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rao576-myn9.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rapportcledigital.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rapportcledigital.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rarebli.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rasekoatcnocn.rakaseeeeooaur.aale2a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rasekoatcnocn.rakaseeeeooaur.hli3b0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rasekoatcnocn.rakaseeeeooaur.nv9dtw.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rasekoatcnocn.rakaseeeeooaur.rmgomo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rasekotcsrncon.rakaseooaseroueea.mgjpjr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rasekotcsrncon.rakaseooaseroueea.mjdnpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rasekotcsrncon.rakaseooaseroueea.uixah3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rasekotcsrncon.rakaseooaseroueea.xyuhnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rasekotncon.rakaseooueea.037768888861.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rasekotncon.rakaseooueea.ansklx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rasekotncon.rakaseooueea.jehe99.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rasekotncon.rakaseooueea.lcazit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rasha.dillevery.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rasheedgroup.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"raspy-king-4ed0.settingspaqesapp.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rationalgrebe.build067.wpsandbox.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rauchenbergerlenggries.clickfunnels.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rawtifnong.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"raycargo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"raydium.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200029328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"raydiumapp.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200029329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rayleies.bond"; content:"Host"; http_header; classtype:attempted-recon; sid:200029330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"razcpufynr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rbcmontgomery.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rbfcu-bank9.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rbgogjbaez.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rbmqqbiyhh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rbtnr.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200029336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rbytzcxhxr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rcimxjqvry.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rciusa.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200029339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rcrtoisgia.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rcube000001.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rcube000001.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rcube000005.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rcube000005.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rcube000006.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rcube000006.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rcube000008.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rcube000008.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rcube000009.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rcube000009.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rcube111112.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rcube111112.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rcube111114.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rcube111114.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rcubebit.bitbucket.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200029355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rcverypgsssokipunaiacc.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200029356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rcvry.sftyacn.scrthlp.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rcvry.sprt.acn-cnfrm.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rcvryacmeidgfjhgsdgasdg.72yhu0lkdz-jqp3vnezy650.p.temp-site.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200029359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rdagzzsrmh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rdansxf.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rdehnvilta.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rdhtire.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200029363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rdkftvxtoc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rdrsnyodzp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rdzaom.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rdzyybo.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200029367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"re-redirection-acc-id923872635122.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"re.pichacasa.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"re.pichares.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"re7d89uevhusah8c.lavzewwclkpiipe-uiguiui-yutriug.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reactiva-benficianavidad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reactivarclavedinamica.87400.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reactivate-device-au.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reactivate-device-au.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reactivate-device.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reactivate-device.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"real.tj"; content:"Host"; http_header; classtype:attempted-recon; sid:200029378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"realesign.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"realizeisolucoesfinanceiras.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"realizeservsolucoes.pagedemo.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"realizesolucoesdesconto.lojaintegrada.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200029382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"realmanhq.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"realorigin.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"realtime-ca.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"realvariable.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"realx2vlwek1r2y0v0zrdev6z16676d5nxj2rhk.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reativarcarrefour.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rebajatuscuentas.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rebcazine.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rebeccasokol.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"receive-a1drop-stake.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200029392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"recipientnabcancel.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reconfrim-4621731286425.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200029394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reconnectings-cloud-b418.d48tf121.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"record-cloud-file.product-list.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"recovery-fb.secure-acct.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"recovery-protection2022.42web.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200029398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"recp-copy.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"recruit2015.i-cas.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rectangular-flower-chanter.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200029401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rectificationserverless-config.herokuapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rectifybridge.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"recuperaciondecuenta-12b0.czemarkojo.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"red-band-bb9d.corinne-guyon625.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"red-cloud-e2f8.ls7lqn9c7536.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"red-or.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"redaosda9s8r235889asd.sigue.la"; content:"Host"; http_header; classtype:attempted-recon; sid:200029408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"redbysfrgroupebox.myfreesites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200029409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"redeem-microsoft-code.sitey.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200029410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"redeem-paraswap.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"redhiper.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rediractionid547012016089540218057.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"redirection-b836d.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"redirr0006.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"redirr0006.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"redknibbles.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"redphaseindia.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"redtailfriday0004.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"redtailfriday0004.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"redwholecategories.cuscatlanrescue.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reemplazobancolombia.090223.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ref8474104617.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200029423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reflejariamov.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200029424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"regencord.com.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"regentoption.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"regionalezeknozoyda.flazio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"regionalslide456643drdfggf566-gyyy66667ggfg.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"register.templejoy.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200029429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reglement-boncoin-securise.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200029430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reglementationsg05.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reglementationsg05.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"regmark.com.tr"; content:"Host"; http_header; classtype:attempted-recon; sid:200029433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"regoin5.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"regoin5.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"regt.eu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"regularizaautorepuve.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"regulierung-der-sparkonto.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rehabilitationdesavantagesbour.trilmentaoldedalkjda.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200029439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reiembalagensonline.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reikiwithasha.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reimondremese.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reimondremese.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reinforcementdetail.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200029444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rejie2.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rekemlcuhd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rekgnral0.d1t9b6b8meyol2.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reliable-salmiakki-b94f43.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reliance-met-jhajjar.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"relianceindustrial-plots.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200029450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reliancejiojob.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reloadingprimersshop.ca"; content:"Host"; http_header; classtype:attempted-recon; sid:200029452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"remarkable-faun-e7cd48.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"remixethereumcompiler.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"remixworldbank.wolrredvirtual.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"remondremebre.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"remondremebre.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"remototarget.ihostfull.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"remove-invalid-access.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"remzicakar.com.tr"; content:"Host"; http_header; classtype:attempted-recon; sid:200029460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"renataassad.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200029461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"renee.sulcfic.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"renew.tiemmesrls.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200029463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"renforcement-0410-200.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"renforcement-0410-200.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"renga-whiteboxes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"renndfdfdsfds.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200029467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"renner-fatura-boleto.ct37556.tmweb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200029468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"renouvellement-vitale-info.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200029469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"renouvellementcartevital.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200029470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rentcollection.technovalleycloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"renv934xorasdbolivi40s9d000423.sigue.la"; content:"Host"; http_header; classtype:attempted-recon; sid:200029472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"repl-mess.myfreesites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200029473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"repppdpcai.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reqlboidfd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"request.br.ironmountain.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"requestredeliveryassistances.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"requestuspusppepostsrvicesid03912.oznemedya.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"res-va.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"res.ms"; content:"Host"; http_header; classtype:attempted-recon; sid:200029480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"resarqarvt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"researchpaperdoms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"resetparametri-dati.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"residenciadeancianosgranada.es"; content:"Host"; http_header; classtype:attempted-recon; sid:200029484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"resilientkidsconference.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200029485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"resolvendo-registro-solucoes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"resonabannk.dfgoo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"resonant-naiad-11e369.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"resonobamk.co.jp.jbsifu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"respectedrhinosclub.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ressgqlqhx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"restles.ndkdjndnnd.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"restless-queen-64bf.dotmay820.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"restoposrms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"restoreservicecu.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"restoresyncguide.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"restorewallet-site.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"restrizioneaccessosospeso.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"result-102585.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200029499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"resultado0730.coop"; content:"Host"; http_header; classtype:attempted-recon; sid:200029500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"retainservice.mailupgradeserv.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rethckdjanaummi.aumii.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"retiro.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200029503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reumondremese.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rev-logon-review.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"review-account-payee.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"review-activity-login.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"review-log-in.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"review-log-in.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"review-unauth-login-au.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"review-wallet-sec-au.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reviewmy-uspshipement.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reviewmyredelivery.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reviewmyshipmentdetails.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"revisione-clienti.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"revisione-clientibper.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"revisione-restrizionebper.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"revisioneclientionline.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"revolvingunlawfulcurrencies--galic32.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"revourplus.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rewardsyncdappssconnect.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rewardsyncdappssconnect.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rfbrkgdbwg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rfcvstfvzn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rfecepdrkv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rfpprojects.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rfpproposalnowakcabinetsofelkrapids.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rfpsubmit.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rgqrspsbwc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rgsolutions.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200029530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rhinowindows.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200029531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ria112.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"riacho-tintas.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"richlaneresidences.vn"; content:"Host"; http_header; classtype:attempted-recon; sid:200029534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"riconoscimentorevisione.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rifwtnbwuy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rigdoedosw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"righteouswalker.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"riguizi.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200029539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rijeshsap53.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200029540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rikmolize.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rio2tokyo.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200029542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ripristinadatiwebapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ripristinoapputente.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ripristinodatiapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"riqtqkmvpc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rise.andain.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"risedefenders.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200029548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"risersmn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"riveroflife.org.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200029550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"riverside.edu.ph"; content:"Host"; http_header; classtype:attempted-recon; sid:200029551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rixgroxtdk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"riysbmjo.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200029553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rjefbguhvj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rjglnraxyf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rjhsxdatdz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rkgroupss.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rljkdnkzdo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rluymgycft.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rm0b36d80rbfckcycaur7d-pzby0y2q54vuuierue31email.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rm8aq3.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rmfdwttnms.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rmgngmrdic.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rmsiepulia.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rncresearch.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200029565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rngqdvsfzx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rnitw2022.eu3.biz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rnpandeypvtiti.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rnpvuzsjkf.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rnpvuzsjkf.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rnvdpvmhul.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ro0vc.app.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200029572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roa2mauthorizepo26callback66f-response0mode.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roadsidemotorsco.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"robilliardag.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"robodarenda.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roccobonheur1-my-cheetah-website-copy.cheetah.builderall.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rocketleaguenft.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rocketpool.claims"; content:"Host"; http_header; classtype:attempted-recon; sid:200029579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rockstheme.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rodriguezadams.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rogerverifyset.byethost4.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rohskruce.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rohsv.inputgiant.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roisnoob.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200029585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rolfson.qfhv5wsook-ewx3ldk9m6zq.p.temp-site.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200029586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"romxn96.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200029587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ronaldgodbee.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ronbbleull.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ronim-walletc.mystrikingly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ronin-chain.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ronin-help.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200029592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ronin-ticket.ink"; content:"Host"; http_header; classtype:attempted-recon; sid:200029593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ronin-wallet.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ronin-wallet.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roninchain.website"; content:"Host"; http_header; classtype:attempted-recon; sid:200029596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roninn-wallet.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200029597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ronkalman.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ronniegreenmarkets.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roomifoods.pk"; content:"Host"; http_header; classtype:attempted-recon; sid:200029600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roomserviceinc.space"; content:"Host"; http_header; classtype:attempted-recon; sid:200029601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rootroop.webs-mint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rootscomm.cam"; content:"Host"; http_header; classtype:attempted-recon; sid:200029603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rootsdetergents.co.za"; content:"Host"; http_header; classtype:attempted-recon; sid:200029604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rorgvugqrr.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rorgvugqrr.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rorlruhjsq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rosshw.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rossovermiglio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rough-wood-4310.on.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roulotearcoiris.pt"; content:"Host"; http_header; classtype:attempted-recon; sid:200029611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"round-sunset-79d6.a3qge91d.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"round-violet-c0fe.henhigay285.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roundcube-5ae8a.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roundcube-5ae8a.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roundcube-cpanel-wren.surge.sh"; content:"Host"; http_header; classtype:attempted-recon; sid:200029616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roundcube-production-cf.tx1.mailhostbox.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roundcube-updatealx.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roundcube-updatealx.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roundcube.authadministrator.workers.dev#kirk@soupro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roundcube0004.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roundcube0004.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roundcubemanday001.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roundcubemanday001.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roundcubemiinday0005.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roundcubemiinday0005.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roundedripecomma--provi2022.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rouwojnqbj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roxit.cloud"; content:"Host"; http_header; classtype:attempted-recon; sid:200029629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"royal-league.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"royal-meat.eu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"royaleboxm11.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"royallink.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200029633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"royj9-ng8.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"royj9-ng8.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roylcu.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200029636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rpbaonamer.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rpcehrjtng.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rpinmbwjtw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rplanet.tops-mint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rpublic.brot-ebk.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rpywtmfbfa.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rpzhznwkzi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rqcosiaipv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rqdrfvibbf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rqjqqfdpfk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rqvaeyyvsa.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rqxxlvgzoz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rqykwkkenw.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rqykwkkenw.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200029650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rrgroup.net.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200029651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rriwy8.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rrr1145666.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rryxmuomks.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rrzmytqvkx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rsarzi.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rskevrdpdn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rsmcfehlzw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rtfkt-airdrop.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200029659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rtfkt-clodida.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200029660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rtfkt.tops-mint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rtfktmarketplace.art"; content:"Host"; http_header; classtype:attempted-recon; sid:200029662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rtfkts.web3-mint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rtkbveqegg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rtm7ineuebyevy536yb56v45y.hytdrsu56u5dyf.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rtr9.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rtyerg.h38uwtyd.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200029667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rtyuibffr.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rtyuk.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rubberflooringindonesia.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ruijntolnf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rujcrdgipg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rulemao.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200029673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rural-1.fxnet.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rural.fxnet.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ruralimpressivememory83881.bienvenidoslkx.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rustybewitchedmachinelanguage.bansegu16.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rususia.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rutadesophia.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ruzzkhfslx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rvuvlucrbr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rvxtajtrrl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rwisoueahb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rxdgrvpcdf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rxivehnzsm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rxrxf18.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rxupdwojaf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ry35rv.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rybehmjxxu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ryevbgbgwn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ryrlxcjgls.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ryuk.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rywusphhbk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ryyvglupzx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rzahkyy.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200029695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rznsscjzvv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rzvr.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200029697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rzzahduqtq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200029698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s-fa31f3-i.sgizmo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s-id-service.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200029700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s-id-services.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200029701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s.amaszucsm-jp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s.amsosezaens.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s.amuezces-jp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s.amzoscsaemr-jp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s.amzoseceme-jp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s.amzosesemr-jp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s.amzosoms-jp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s.eu.premiumisp.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200029709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s.free.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200029710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s.infidefi-smartsync.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200029711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s.yam.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s104318.gridserver.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s193-12-119-75.main.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200029714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s1s03t.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s23.proserv.ge"; content:"Host"; http_header; classtype:attempted-recon; sid:200029716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s2yiut.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s3.eu-west-2.wasabisys.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s4bskcnr4ocn.m7yke.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200029719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s4r9mj97.r.us-east-1.awstrack.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200029720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s52i0t.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s5ixrmebarrd6dfvne54nlmbm6myu2aqt7bwcnhx4rsy6ul4-ipfs-w3s-link.translate.goog"; content:"Host"; http_header; classtype:attempted-recon; sid:200029722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s5r7pt.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200029723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s7f.6d2.myftpupload.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200029724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s8094972.sendpul.se"; content:"Host"; http_header; classtype:attempted-recon; sid:200029725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaeeeiescssceoe.saaccacerseoorria.2fx3p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaeeeiescssceoe.saaccacerseoorria.6j449d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaeeeiescssceoe.saaccacerseoorria.7wqxmz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaeeeiescssceoe.saaccacerseoorria.botom1.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaeeeiescssceoe.saaccacerseoorria.ebqzws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaeeeiescssceoe.saaccacerseoorria.fjmcxh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaeeeiescssceoe.saaccacerseoorria.fph186.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaeeeiescssceoe.saaccacerseoorria.gxemzv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaeeeiescssceoe.saaccacerseoorria.hwzwtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaeeeiescssceoe.saaccacerseoorria.ioxzyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaeeeiescssceoe.saaccacerseoorria.ioyatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaeeeiescssceoe.saaccacerseoorria.j68gux.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaeeeiescssceoe.saaccacerseoorria.mbruzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaeeeiescssceoe.saaccacerseoorria.noqaub.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaeeeiescssceoe.saaccacerseoorria.orhznj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaeeeiescssceoe.saaccacerseoorria.ouomrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaeeeiescssceoe.saaccacerseoorria.slbggp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaeeeiescssceoe.saaccacerseoorria.syzyzz.ltd"; content:"Host"; http_header; classtype:attempted-recon; sid:200029743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaeeeiescssceoe.saaccacerseoorria.txbrht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaeeeiescssceoe.saaccacerseoorria.voezvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.10-0uuylvdpatiqzcrok.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200029746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.ajkqym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.botom1.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.cdsqma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.charlang.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200029750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.cyqggi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.dtyweh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.dxsahh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.dzerdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.ebmedia.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.gulbul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.gzj5012.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.hlsmyl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.iddr8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.ioxzyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.lcacsa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.lgn09m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.lmhau8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.lnuxfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.mbruzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.nfffte.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.opyxhy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.qlxmyy666.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.qmjded.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.rolling37.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.sblr007.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.vr0rx.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.vspuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.ykjclz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaaieesecsesoe.saccacseoeriaor.zxj4025.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieesacseoe.saccsecoiaarser.2fx3p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieesacseoe.saccsecoiaarser.axrdkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieesacseoe.saccsecoiaarser.bokqmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieesacseoe.saccsecoiaarser.ctokrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieesacseoe.saccsecoiaarser.dkvvuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieesacseoe.saccsecoiaarser.drlbyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieesacseoe.saccsecoiaarser.gmgjkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieesacseoe.saccsecoiaarser.iddr8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieesacseoe.saccsecoiaarser.ioyatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieesacseoe.saccsecoiaarser.j68gux.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieesacseoe.saccsecoiaarser.jdqnac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieesacseoe.saccsecoiaarser.jxvstx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieesacseoe.saccsecoiaarser.k43e5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieesacseoe.saccsecoiaarser.kqstye.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieesacseoe.saccsecoiaarser.ohmatb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieesacseoe.saccsecoiaarser.piicje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieesacseoe.saccsecoiaarser.ppvlmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieesacseoe.saccsecoiaarser.prthkn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieesacseoe.saccsecoiaarser.qlxmyy666.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieesacseoe.saccsecoiaarser.qmjded.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieesacseoe.saccsecoiaarser.sblr005.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieesacseoe.saccsecoiaarser.sblr009.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieesacseoe.saccsecoiaarser.sd2ed.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieesacseoe.saccsecoiaarser.uabtme.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieesacseoe.saccsecoiaarser.zwddtp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.1345578.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.2ebz23.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.2uz8yl.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.5xvtv1.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.7wqxmz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.cdsqma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.cjsuye.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.eaoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.ebqzws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.fhalul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.fjmcxh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.fph186.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.iddr8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.ioxzyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.klvjnr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.lnuxfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.lurojy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.mzbqid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.onazqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.piicje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.ruesxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.sl86as.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.tdenvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.tvvghs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.txbrht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.vkzvur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.vr0rx.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaeieescsceoe.sacacsceorira.wcidvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.4-4-j-tyu-uyt.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.7wqxmz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.axrdkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.cjsuye.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.cjxmoz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.cxusvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.dgmeec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.ebqzws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.hvjagp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.ijowbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.ioxzyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.ixk0s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.k43e5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.klvjnr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.lurojy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.mfts.ltd"; content:"Host"; http_header; classtype:attempted-recon; sid:200029844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.mwsxcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.nljqmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.noqaub.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.ozmubm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.pctmqj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.ppvlmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.prthkn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.rewvsa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.rolling37.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.sblr005.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.sblr009.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.syzyzz.ltd"; content:"Host"; http_header; classtype:attempted-recon; sid:200029856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.ukqtgw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.umkykk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.verse6.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiceesecsesoe.sascacseoeraior.zlsrwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.4vul30.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.87qi6p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.axcgpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.ctokrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.cxusvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.cyqggi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.drlbyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.fjmcxh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.gulbul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.ioxzyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.ixk0s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.jrignr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.k43e5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.mbruzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.noqaub.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.ohmatb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.pctmqj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.q04nkf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.realme.cool"; content:"Host"; http_header; classtype:attempted-recon; sid:200029879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.rsnhxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.sblr007.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.sblr009.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.sgrxpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.syzyzz.ltd"; content:"Host"; http_header; classtype:attempted-recon; sid:200029884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.uabtme.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.xgyaef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.zgzemr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaieeecescssceoe.saacsacerseoorrai.zlsrwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiseecseoe.saccseoicar.5xvtv1.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiseecseoe.saccseoicar.6nc5p5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiseecseoe.saccseoicar.anl7ya.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiseecseoe.saccseoicar.ctokrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiseecseoe.saccseoicar.dvqses.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200029893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiseecseoe.saccseoicar.eaoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiseecseoe.saccseoicar.fjmcxh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiseecseoe.saccseoicar.gmgjkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiseecseoe.saccseoicar.gyzt802.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiseecseoe.saccseoicar.iddr8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiseecseoe.saccseoicar.ioxzyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiseecseoe.saccseoicar.jhuejd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiseecseoe.saccseoicar.k43e5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiseecseoe.saccseoicar.khbsvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiseecseoe.saccseoicar.lmhau8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiseecseoe.saccseoicar.qlxmyy666.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiseecseoe.saccseoicar.sblr005.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiseecseoe.saccseoicar.sl86as.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaaiseecseoe.saccseoicar.utshxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaeaiescssceoe.saacaceseoorcriaas.2uz8yl.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaeaiescssceoe.saacaceseoorcriaas.4-4-j-tyu-uyt.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaeaiescssceoe.saacaceseoorcriaas.cjsuye.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaeaiescssceoe.saacaceseoorcriaas.dzerdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaeaiescssceoe.saacaceseoorcriaas.hwzwtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaeaiescssceoe.saacaceseoorcriaas.j68gux.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaeaiescssceoe.saacaceseoorcriaas.kpygtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaeaiescssceoe.saacaceseoorcriaas.l1ldvy.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200029915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaeaiescssceoe.saacaceseoorcriaas.mivflz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaeaiescssceoe.saacaceseoorcriaas.njhpgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaeaiescssceoe.saacaceseoorcriaas.nljqmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaeaiescssceoe.saacaceseoorcriaas.osnolv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaeaiescssceoe.saacaceseoorcriaas.sblr001.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaeaiescssceoe.saacaceseoorcriaas.sblr005.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaeaiescssceoe.saacaceseoorcriaas.txbrht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaeaiescssceoe.saacaceseoorcriaas.uabtme.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaeaiescssceoe.saacaceseoorcriaas.umkykk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaeaiescssceoe.saacaceseoorcriaas.vtcgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaiasecsesoe.saccaseoeicaoras.2uz8yl.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaiasecsesoe.saccaseoeicaoras.cdfsiejkf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaiasecsesoe.saccaseoeicaoras.cjxmoz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaiasecsesoe.saccaseoeicaoras.dgmeec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaiasecsesoe.saccaseoeicaoras.eaoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaiasecsesoe.saccaseoeicaoras.gmgjkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaiasecsesoe.saccaseoeicaoras.hcoklg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaiasecsesoe.saccaseoeicaoras.hgpqys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaiasecsesoe.saccaseoeicaoras.hvjagp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaiasecsesoe.saccaseoeicaoras.jdqnac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaiasecsesoe.saccaseoeicaoras.kpygtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaiasecsesoe.saccaseoeicaoras.lurojy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaiasecsesoe.saccaseoeicaoras.nfffte.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaiasecsesoe.saccaseoeicaoras.njhpgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaiasecsesoe.saccaseoeicaoras.ozmubm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaiasecsesoe.saccaseoeicaoras.prthkn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaiasecsesoe.saccaseoeicaoras.qlxmyy666.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaiasecsesoe.saccaseoeicaoras.rataxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaiasecsesoe.saccaseoeicaoras.sd2ed.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaiasecsesoe.saccaseoeicaoras.tmwhe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaiasecsesoe.saccaseoeicaoras.tzwpfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaiasecsesoe.saccaseoeicaoras.vtcgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaiasecsesoe.saccaseoeicaoras.ykjclz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaiasecsesoe.saccaseoeicaoras.zxj4025.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaicseecseoe.sascseoacir.2ebz23.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaicseecseoe.sascseoacir.3667884.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaicseecseoe.sascseoacir.bokqmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaicseecseoe.sascseoacir.dgmeec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaicseecseoe.sascseoacir.dtyweh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaicseecseoe.sascseoacir.dzerdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaicseecseoe.sascseoacir.fhalul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaicseecseoe.sascseoacir.hwzwtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaicseecseoe.sascseoacir.jhuejd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaicseecseoe.sascseoacir.kqstye.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaicseecseoe.sascseoacir.mbruzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaicseecseoe.sascseoacir.ncatge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaicseecseoe.sascseoacir.ppvlmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaicseecseoe.sascseoacir.rbqvre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaicseecseoe.sascseoacir.realme.cool"; content:"Host"; http_header; classtype:attempted-recon; sid:200029964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaicseecseoe.sascseoacir.rolling37.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaicseecseoe.sascseoacir.sblr009.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaicseecseoe.sascseoacir.scmfkh.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200029967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaicseecseoe.sascseoacir.sl86as.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaicseecseoe.sascseoacir.syzyzz.ltd"; content:"Host"; http_header; classtype:attempted-recon; sid:200029969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaicseecseoe.sascseoacir.vspuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaicseecseoe.sascseoacir.wcidvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceesacseoe.sascsecoaiarser.6nc5p5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceesacseoe.sascsecoaiarser.cjsuye.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceesacseoe.sascsecoaiarser.cyqggi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceesacseoe.sascsecoaiarser.gzj7001.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceesacseoe.sascsecoaiarser.ia4myc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceesacseoe.sascsecoaiarser.iiyqmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceesacseoe.sascsecoaiarser.j68gux.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceesacseoe.sascsecoaiarser.k43e5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceesacseoe.sascsecoaiarser.piicje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceesacseoe.sascsecoaiarser.pvebll.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200029981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceesacseoe.sascsecoaiarser.sblr009.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceesacseoe.sascsecoaiarser.syzyzz.ltd"; content:"Host"; http_header; classtype:attempted-recon; sid:200029983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceesacseoe.sascsecoaiarser.tgytgc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceesacseoe.sascsecoaiarser.tmwhe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceesacseoe.sascsecoaiarser.txbrht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceesacseoe.sascsecoaiarser.udhdcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceesacseoe.sascsecoaiarser.zgzemr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.1345578.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.4-4-j-tyu-uyt.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200029990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.4vul30.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.6j449d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.6nc5p5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.axcgpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.axrdkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.bokqmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.botom1.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200029997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.cxusvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.cyqggi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200029999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.dzerdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.eaoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.hlsmyl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.ia4myc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.ijowbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.ixk0s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.khbsvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.metabrain.group"; content:"Host"; http_header; classtype:attempted-recon; sid:200030007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.mwsxcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.ncatge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.nfffte.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.pctmqj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.prthkn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.realme.cool"; content:"Host"; http_header; classtype:attempted-recon; sid:200030013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.rewvsa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.sblr001.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.sd2ed.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.txbrht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.tzwpfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.umkykk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.vr0rx.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieceescsceoe.sasacsceorari.vspuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieseecasoe.sacseoiacserr.2z6dpf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieseecasoe.sacseoiacserr.4vul30.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieseecasoe.sacseoiacserr.6nc5p5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieseecasoe.sacseoiacserr.botom1.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieseecasoe.sacseoiacserr.cdfsiejkf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieseecasoe.sacseoiacserr.fph186.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieseecasoe.sacseoiacserr.gmgjkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieseecasoe.sacseoiacserr.gzj5012.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieseecasoe.sacseoiacserr.hlsmyl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieseecasoe.sacseoiacserr.hvjagp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieseecasoe.sacseoiacserr.iddr8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieseecasoe.sacseoiacserr.j68gux.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieseecasoe.sacseoiacserr.mfts.ltd"; content:"Host"; http_header; classtype:attempted-recon; sid:200030034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieseecasoe.sacseoiacserr.mzbqid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieseecasoe.sacseoiacserr.pctmqj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieseecasoe.sacseoiacserr.qlxmyy666.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieseecasoe.sacseoiacserr.ruesxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieseecasoe.sacseoiacserr.slbggp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieseecasoe.sacseoiacserr.txbrht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieseecasoe.sacseoiacserr.utshxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieseecasoe.sacseoiacserr.vr0rx.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieseecasoe.sacseoiacserr.vtcgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieseecasoe.sacseoiacserr.vxcgax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaieseecasoe.sacseoiacserr.zlsrwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaisceesoe.sacseoicr.2fx3p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaisceesoe.sacseoicr.3667884.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaisceesoe.sacseoicr.4-4-j-tyu-uyt.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaisceesoe.sacseoicr.7wqxmz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaisceesoe.sacseoicr.dchain.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaisceesoe.sacseoicr.dkvvuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaisceesoe.sacseoicr.ebqzws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaisceesoe.sacseoicr.ixk0s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaisceesoe.sacseoicr.k43e5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaisceesoe.sacseoicr.klvjnr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaisceesoe.sacseoicr.lcacsa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaisceesoe.sacseoicr.lnuxfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaisceesoe.sacseoicr.mzbqid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaisceesoe.sacseoicr.onazqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaisceesoe.sacseoicr.ptohrn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaisceesoe.sacseoicr.q04nkf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaisceesoe.sacseoicr.sgrxpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaisceesoe.sacseoicr.tgytgc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaisceesoe.sacseoicr.tzwpfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaisceesoe.sacseoicr.ukqtgw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaisceesoe.sacseoicr.verse6.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaisceesoe.sacseoicr.vkzvur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaisceesoe.sacseoicr.vspuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaisceesoe.sacseoicr.vxcgax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaaisceesoe.sacseoicr.yjefsg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceescaivcsearirincr.soreaacsieosnaiciaoeaosonseosir.0nwxs.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceescaivcsearirincr.soreaacsieosnaiciaoeaosonseosir.9gbi0w.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceescaivcsearirincr.soreaacsieosnaiciaoeaosonseosir.evrzoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceescaivcsearirincr.soreaacsieosnaiciaoeaosonseosir.pgwcxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceescaivcsearirincr.soreaacsieosnaiciaoeaosonseosir.rbvlpb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceescaivcsearirincr.soreaacsieosnaiciaoeaosonseosir.uinty.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceescaivcsearirincr.soreaacsieosnaiciaoeaosonseosir.vcwpsa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceessaivcceaririccrsoorna.seieascaacirsoocaoeaosesoeosiren.0nwxs.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceessaivcceaririccrsoorna.seieascaacirsoocaoeaosesoeosiren.b1ufnm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceessaivcceaririccrsoorna.seieascaacirsoocaoeaosesoeosiren.oinm8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceessaivcceaririccrsoorna.seieascaacirsoocaoeaosesoeosiren.yo4xv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceessaivcceaririccrsoorna.seieascaacirsoocaoeaosesoeosiren.z4zj8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceessaivceeaririccrsoorna.seieascasciooocneaosesonssiren.3nm.tech"; content:"Host"; http_header; classtype:attempted-recon; sid:200030083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceessaivceeaririccrsoorna.seieascasciooocneaosesonssiren.finamv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceessaivceeaririccrsoorna.seieascasciooocneaosesonssiren.pgofap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceessaivceeaririccrsoorna.seieascasciooocneaosesonssiren.rgpivj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceessaivceeaririccrsoorna.seieascasciooocneaosesonssiren.wyisqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceessaivceeaririscronor.aseaiecseascioconaaosesonseiren.0nwxs.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceessaivceeaririscronor.aseaiecseascioconaaosesonseiren.jlvnfj.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200030089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceessaivceeaririscronor.aseaiecseascioconaaosesonseiren.nfygxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceessaivceeaririscronor.aseaiecseascioconaaosesonseiren.yohzhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceiseaivcceaririecrcsoroan.sieesaaacircoesioaoeaosenseosiren.aajinrong805.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200030092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceiseaivcceaririecrcsoroan.sieesaaacircoesioaoeaosenseosiren.chashanchu09.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200030093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceiseaivcceaririecrcsoroan.sieesaaacircoesioaoeaosenseosiren.fwpkjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceiseaivcseaririecrcsoroan.sieesaaccioeosoaoeaosesoeosiren.bkcuph.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceiseaivcseaririecrcsoroan.sieesaaccioeosoaoeaosesoeosiren.dkfrva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceiseaivcseaririecrcsoroan.sieesaaccioeosoaoeaosesoeosiren.finamv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceiseaivcseaririecrcsoroan.sieesaaccioeosoaoeaosesoeosiren.mugnqj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceiseaivcseaririecrcsoroan.sieesaaccioeosoaoeaosesoeosiren.rgxcoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceiseaivcseaririecrcsoroan.sieesaaccioeosoaoeaosesoeosiren.suqluj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceissaivcceaririccrsoorna.seieascaacirsoeoaoeaosesoeosiren.2h4j6m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceissaivcceaririccrsoorna.seieascaacirsoeoaoeaosesoeosiren.76-u-zqw1.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceissaivcceaririccrsoorna.seieascaacirsoeoaoeaosesoeosiren.ghdbbh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceissaivcceaririccrsoorna.seieascaacirsoeoaoeaosesoeosiren.ndiuxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceissaivcceaririccrsoorna.seieascaacirsoeoaoeaosesoeosiren.ratasc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceissaivceeaririccrsoorna.seieascascioeooneaosesonssiren.6b3qxy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceissaivceeaririccrsoorna.seieascascioeooneaosesonssiren.ajarg5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceissaivceeaririccrsoorna.seieascascioeooneaosesonssiren.eghloo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceissaivceeaririccrsoorna.seieascascioeooneaosesonssiren.sgl2h3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacaceissaivceeaririccrsoorna.seieascascioeooneaosesonssiren.xbwkny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririocrn.orsaeaciesseaociniaoesesonseosen.adorui.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririocrn.orsaeaciesseaociniaoesesonseosen.pgwcxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririocrn.orsaeaciesseaociniaoesesonseosen.qfi2r.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririocrn.orsaeaciesseaociniaoesesonseosen.rqdauw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririocrn.orsaeaciesseaociniaoesesonseosen.sgl2h3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririocrn.orsaeaciesseaociniaoesesonseosen.trtszi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririocrn.orsaeaciessoacciniaoesesonseosen.lbvhv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririocrn.orsaeaciessoacciniaoesesonseosen.mugnqj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririocrn.orsaeaciessoacciniaoesesonseosen.pubxgn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririocrn.orsaeaciessoacciniaoesesonseosen.xbwkny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririscronor.aseaiecssaaciroonieaosesonssiren.0h539n.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririscronor.aseaiecssaaciroonieaosesonssiren.adorui.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririscronor.aseaiecssaaciroonieaosesonssiren.dpdndt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririscronor.aseaiecssaaciroonieaosesonssiren.evrzoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririscronor.aseaiecssaaciroonieaosesonssiren.mjexdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririscronor.aseaiecssaaciroonieaosesonssiren.syd58.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririscronor.aseaiecssaaciroonieaosesonssiren.xkye1.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririscronor.aseaiecssaaciroonieaosesonssiren.yo4xv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririscronor.aseaiecssaocionoaoosesonseoren.axuxfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririscronor.aseaiecssaocionoaoosesonseoren.cvhvjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririscronor.aseaiecssaocionoaoosesonseoren.dohsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririscronor.aseaiecssaocionoaoosesonseoren.kvmh9r.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririscronor.aseaiecssaocionoaoosesonseoren.odiuwn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririscronor.aseaiecssaocionoaoosesonseoren.oinm8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririscronor.aseaiecssaocionoaoosesonseoren.rbvlpb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacacesseaivcceaririscronor.aseaiecssaocionoaoosesonseoren.vcwpsa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccecaicsairncr.soreaacsieosnaiciaoeaosesonseosiren.3488754.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccecaicsairncr.soreaacsieosnaiciaoeaosesonseosiren.76-u-kkj18.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccecaicsairncr.soreaacsieosnaiciaoeaosesonseosiren.9gbi0w.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccecaicsairncr.soreaacsieosnaiciaoeaosesonseosiren.cyzemc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccecaicsairncr.soreaacsieosnaiciaoeaosesonseosiren.h80drs.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccecaicsairncr.soreaacsieosnaiciaoeaosesonseosiren.hggluj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccecaicsairncr.soreaacsieosnaiciaoeaosesonseosiren.kgetic.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccecaicsairncr.soreaacsieosnaiciaoeaosesonseosiren.ktyebr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccecaicsairncr.soreaacsieosnaiciaoeaosesonseosiren.mvigpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccecaicsairncr.soreaacsieosnaiciaoeaosesonseosiren.ndiuxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccecaicsairncr.soreaacsieosnaiciaoeaosesonseosiren.odiuwn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccecaicsairncr.soreaacsieosnaiciaoeaosesonseosiren.okywvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccecaicsairncr.soreaacsieosnaiciaoeaosesonseosiren.rjfbqi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccecaicsairncr.soreaacsieosnaiciaoeaosesonseosiren.sdqqgx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccecaicsairncr.soreaacsieosnaiciaoeaosesonseosiren.suqluj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiccairccrsoorna.seieascaacirsoocinaoeaosesonseosiren.6b3qxy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiccairccrsoorna.seieascaacirsoocinaoeaosesonseosiren.76-u-kkj18.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiccairccrsoorna.seieascaacirsoocinaoeaosesonseosiren.bkcuph.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiccairccrsoorna.seieascaacirsoocinaoeaosesonseosiren.cjkin.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiccairccrsoorna.seieascaacirsoocinaoeaosesonseosiren.gzj5011.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiccairccrsoorna.seieascaacirsoocinaoeaosesonseosiren.ikipon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiccairccrsoorna.seieascaacirsoocinaoeaosesonseosiren.jfiogo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiccairccrsoorna.seieascaacirsoocinaoeaosesonseosiren.mugnqj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiccairccrsoorna.seieascaacirsoocinaoeaosesonseosiren.o5irm9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiccairccrsoorna.seieascaacirsoocinaoeaosesonseosiren.okywvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiccairccrsoorna.seieascaacirsoocinaoeaosesonseosiren.pubxgn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiccairccrsoorna.seieascaacirsoocinaoeaosesonseosiren.puwcxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiccairccrsoorna.seieascaacirsoocinaoeaosesonseosiren.qlzblp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiccairccrsoorna.seieascaacirsoocinaoeaosesonseosiren.rgxcoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiccairccrsoorna.seieascaacirsoocinaoeaosesonseosiren.rjfbqi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiccairccrsoorna.seieascaacirsoocinaoeaosesonseosiren.uwmcgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiccairccrsoorna.seieascaacirsoocinaoeaosesonseosiren.zynepg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairccrsoorna.seieascasciooocnaoeaosesonseosiren.1ncp3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairccrsoorna.seieascasciooocnaoeaosesonseosiren.aftnvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairccrsoorna.seieascasciooocnaoeaosesonseosiren.ajarg5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairccrsoorna.seieascasciooocnaoeaosesonseosiren.cvhvjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairccrsoorna.seieascasciooocnaoeaosesonseosiren.eghloo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairccrsoorna.seieascasciooocnaoeaosesonseosiren.fwpkjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairccrsoorna.seieascasciooocnaoeaosesonseosiren.kjtxzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairccrsoorna.seieascasciooocnaoeaosesonseosiren.kulxbm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairccrsoorna.seieascasciooocnaoeaosesonseosiren.lbvhv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairccrsoorna.seieascasciooocnaoeaosesonseosiren.ndiuxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairccrsoorna.seieascasciooocnaoeaosesonseosiren.oepcxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairccrsoorna.seieascasciooocnaoeaosesonseosiren.oinm8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairccrsoorna.seieascasciooocnaoeaosesonseosiren.tkdwso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairccrsoorna.seieascasciooocnaoeaosesonseosiren.u3xxum.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairccrsoorna.seieascasciooocnaoeaosesonseosiren.xmdjsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairscronor.aseaiecseascioconaoeaosesonseosiren.3488754.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairscronor.aseaiecseascioconaoeaosesonseosiren.9gbi0w.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairscronor.aseaiecseascioconaoeaosesonseosiren.b9asf8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairscronor.aseaiecseascioconaoeaosesonseosiren.evrzoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairscronor.aseaiecseascioconaoeaosesonseosiren.lbvhv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairscronor.aseaiecseascioconaoeaosesonseosiren.lxpinv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairscronor.aseaiecseascioconaoeaosesonseosiren.metatv.website"; content:"Host"; http_header; classtype:attempted-recon; sid:200030190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairscronor.aseaiecseascioconaoeaosesonseosiren.nnicqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairscronor.aseaiecseascioconaoeaosesonseosiren.qlzblp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairscronor.aseaiecseascioconaoeaosesonseosiren.sde4rq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairscronor.aseaiecseascioconaoeaosesonseosiren.uvoeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairscronor.aseaiecseascioconaoeaosesonseosiren.xmfqad.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200030195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairscronor.aseaiecseascioconaoeaosesonseosiren.yohzhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccesaiceairscronor.aseaiecseascioconaoeaosesonseosiren.zynepg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaiccairecrcsoroan.sieesaaacircoesinioaoeaosesonseosiren.0s0oy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaiccairecrcsoroan.sieesaaacircoesinioaoeaosesonseosiren.1ncp3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaiccairecrcsoroan.sieesaaacircoesinioaoeaosesonseosiren.ajiuwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaiccairecrcsoroan.sieesaaacircoesinioaoeaosesonseosiren.b9asf8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaiccairecrcsoroan.sieesaaacircoesinioaoeaosesonseosiren.cjkin.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaiccairecrcsoroan.sieesaaacircoesinioaoeaosesonseosiren.dkfrva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaiccairecrcsoroan.sieesaaacircoesinioaoeaosesonseosiren.dqavbn.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200030204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaiccairecrcsoroan.sieesaaacircoesinioaoeaosesonseosiren.itmoow.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaiccairecrcsoroan.sieesaaacircoesinioaoeaosesonseosiren.ivkxun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaiccairecrcsoroan.sieesaaacircoesinioaoeaosesonseosiren.lbvhv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaiccairecrcsoroan.sieesaaacircoesinioaoeaosesonseosiren.nolj49.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaiccairecrcsoroan.sieesaaacircoesinioaoeaosesonseosiren.sde4rq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaiccairecrcsoroan.sieesaaacircoesinioaoeaosesonseosiren.uinty.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaiccairecrcsoroan.sieesaaacircoesinioaoeaosesonseosiren.vcwpsa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaiccairecrcsoroan.sieesaaacircoesinioaoeaosesonseosiren.xizobr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaiccairecrcsoroan.sieesaaacircoesinioaoeaosesonseosiren.yo4xv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaiccairecrcsoroan.sieesaaacircoesinioaoeaosesonseosiren.yunshufen.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaiccairecrcsoroan.sieesaaacircoesinioaoeaosesonseosiren.z4zj8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaiccairecrcsoroan.sieesaaacircoesinioaoeaosesonseosiren.zhangyichao1995.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaiccairecrcsoroan.sieesaaacircoesinioaoeaosesonseosiren.zklgse.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200030217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaicsairecrcsoroan.sieesaaccioeosoinaoeaosesonseosiren.2h4j6m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaicsairecrcsoroan.sieesaaccioeosoinaoeaosesonseosiren.cvhvjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaicsairecrcsoroan.sieesaaccioeosoinaoeaosesonseosiren.eghloo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaicsairecrcsoroan.sieesaaccioeosoinaoeaosesonseosiren.gbbxdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaicsairecrcsoroan.sieesaaccioeosoinaoeaosesonseosiren.jdjubw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaicsairecrcsoroan.sieesaaccioeosoinaoeaosesonseosiren.mmcqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaicsairecrcsoroan.sieesaaccioeosoinaoeaosesonseosiren.ndiuxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaicsairecrcsoroan.sieesaaccioeosoinaoeaosesonseosiren.nfygxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaicsairecrcsoroan.sieesaaccioeosoinaoeaosesonseosiren.nxuiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaicsairecrcsoroan.sieesaaccioeosoinaoeaosesonseosiren.o5irm9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaicsairecrcsoroan.sieesaaccioeosoinaoeaosesonseosiren.qzqnfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaicsairecrcsoroan.sieesaaccioeosoinaoeaosesonseosiren.rgxcoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaicsairecrcsoroan.sieesaaccioeosoinaoeaosesonseosiren.syzzhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaicsairecrcsoroan.sieesaaccioeosoinaoeaosesonseosiren.uwmcgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccieaicsairecrcsoroan.sieesaaccioeosoinaoeaosesonseosiren.xbwkny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiccairccrsoorna.seieascaacirsoeoinaoeaosesonseosiren.ewnywn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiccairccrsoorna.seieascaacirsoeoinaoeaosesonseosiren.irllcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiccairccrsoorna.seieascaacirsoeoinaoeaosesonseosiren.kq202a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiccairccrsoorna.seieascaacirsoeoinaoeaosesonseosiren.lbvhv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiccairccrsoorna.seieascaacirsoeoinaoeaosesonseosiren.ncligz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiccairccrsoorna.seieascaacirsoeoinaoeaosesonseosiren.o5irm9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiccairccrsoorna.seieascaacirsoeoinaoeaosesonseosiren.pubxgn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiccairccrsoorna.seieascaacirsoeoinaoeaosesonseosiren.suqluj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiccairccrsoorna.seieascaacirsoeoinaoeaosesonseosiren.syd58.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiccairccrsoorna.seieascaacirsoeoinaoeaosesonseosiren.trtszi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiccairccrsoorna.seieascaacirsoeoinaoeaosesonseosiren.uvoeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiceairccrsoorna.seieascascioeoonaoeaosesonseosiren.76-u-kkj18.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiceairccrsoorna.seieascascioeoonaoeaosesonseosiren.76-u-zqw1.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiceairccrsoorna.seieascascioeoonaoeaosesonseosiren.abm9v2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiceairccrsoorna.seieascascioeoonaoeaosesonseosiren.bkcuph.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiceairccrsoorna.seieascascioeoonaoeaosesonseosiren.bohc7y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiceairccrsoorna.seieascascioeoonaoeaosesonseosiren.ftibzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiceairccrsoorna.seieascascioeoonaoeaosesonseosiren.fwpkjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiceairccrsoorna.seieascascioeoonaoeaosesonseosiren.irllcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiceairccrsoorna.seieascascioeoonaoeaosesonseosiren.kfssyc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiceairccrsoorna.seieascascioeoonaoeaosesonseosiren.kmflyc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiceairccrsoorna.seieascascioeoonaoeaosesonseosiren.mugnqj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiceairccrsoorna.seieascascioeoonaoeaosesonseosiren.nnicqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiceairccrsoorna.seieascascioeoonaoeaosesonseosiren.nxuiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiceairccrsoorna.seieascascioeoonaoeaosesonseosiren.nzmoa6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiceairccrsoorna.seieascascioeoonaoeaosesonseosiren.pgwcxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiceairccrsoorna.seieascascioeoonaoeaosesonseosiren.rjfbqi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiceairccrsoorna.seieascascioeoonaoeaosesonseosiren.trtszi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiceairccrsoorna.seieascascioeoonaoeaosesonseosiren.uwmcgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiceairccrsoorna.seieascascioeoonaoeaosesonseosiren.whfpks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccisaiceairccrsoorna.seieascascioeoonaoeaosesonseosiren.yo4xv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciesseaociniaoeaosesonseosiren.4sji2i.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciesseaociniaoeaosesonseosiren.77ma30.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciesseaociniaoeaosesonseosiren.8sy2b.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciesseaociniaoeaosesonseosiren.bgjjoi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciesseaociniaoeaosesonseosiren.ecabki.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciesseaociniaoeaosesonseosiren.hizwrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciesseaociniaoeaosesonseosiren.jkuxmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciesseaociniaoeaosesonseosiren.kpdmbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciesseaociniaoeaosesonseosiren.ncligz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciesseaociniaoeaosesonseosiren.phpump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciesseaociniaoeaosesonseosiren.ratasc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciesseaociniaoeaosesonseosiren.rxcevr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciesseaociniaoeaosesonseosiren.svgsxn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciesseaociniaoeaosesonseosiren.syd58.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciesseaociniaoeaosesonseosiren.uinty.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciesseaociniaoeaosesonseosiren.ybvasb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciessoacciniaoeaosesonseosiren.2h4j6m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciessoacciniaoeaosesonseosiren.aftnvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciessoacciniaoeaosesonseosiren.evrzoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciessoacciniaoeaosesonseosiren.jdftpe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciessoacciniaoeaosesonseosiren.jdjubw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciessoacciniaoeaosesonseosiren.kpdmbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciessoacciniaoeaosesonseosiren.kq202a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciessoacciniaoeaosesonseosiren.lxpinv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciessoacciniaoeaosesonseosiren.ncligz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciessoacciniaoeaosesonseosiren.nfygxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciessoacciniaoeaosesonseosiren.oinm8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciessoacciniaoeaosesonseosiren.tcsctj.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200030291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciessoacciniaoeaosesonseosiren.vcwpsa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciessoacciniaoeaosesonseosiren.w10auy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairocrn.orsaeaciessoacciniaoeaosesonseosiren.yjdcrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaacirooniaoeaosesonseosiren.6b3qxy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaacirooniaoeaosesonseosiren.77ma30.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaacirooniaoeaosesonseosiren.9gbi0w.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaacirooniaoeaosesonseosiren.9i8e85.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaacirooniaoeaosesonseosiren.dlfylt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaacirooniaoeaosesonseosiren.dohsd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaacirooniaoeaosesonseosiren.ivkxun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaacirooniaoeaosesonseosiren.jkuxmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaacirooniaoeaosesonseosiren.kjtxzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaacirooniaoeaosesonseosiren.kvmh9r.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaacirooniaoeaosesonseosiren.lbvhv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaacirooniaoeaosesonseosiren.ndiuxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaacirooniaoeaosesonseosiren.nfygxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaacirooniaoeaosesonseosiren.nnicqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaacirooniaoeaosesonseosiren.okywvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaacirooniaoeaosesonseosiren.ozryoo.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200030310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaacirooniaoeaosesonseosiren.pibfhc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaacirooniaoeaosesonseosiren.rqdauw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaacirooniaoeaosesonseosiren.syd58.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaacirooniaoeaosesonseosiren.uvoeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaocionoaoeaosesonseosiren.76-u-kkj18.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaocionoaoeaosesonseosiren.axuxfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaocionoaoeaosesonseosiren.cyzemc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaocionoaoeaosesonseosiren.ivkxun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaocionoaoeaosesonseosiren.jdjubw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaocionoaoeaosesonseosiren.jfiogo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaocionoaoeaosesonseosiren.kfssyc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaocionoaoeaosesonseosiren.ki6lhg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaocionoaoeaosesonseosiren.kulxbm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaocionoaoeaosesonseosiren.ochamf.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200030324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaocionoaoeaosesonseosiren.rgxcoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaocionoaoeaosesonseosiren.svgsxn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaccseaiccairscronor.aseaiecssaocionoaoeaosesonseosiren.ybvasb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.1345578.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.2uz8yl.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.4-4-j-tyu-uyt.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.6nc5p5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.87qi6p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.botom1.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.ctokrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.dzerdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.fhalul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.ia4myc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.iddr8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.ijowbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.ioxzyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.ixk0s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.kwlzjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.kxdnjf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.lmhau8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.metabrain.group"; content:"Host"; http_header; classtype:attempted-recon; sid:200030345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.ohmatb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.opyxhy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.osnolv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.qqwfas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.rsnhxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.sblr001.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.verse6.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.voezvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saacsecsesoe.sascasceoeai.ykjclz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.4-4-j-tyu-uyt.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.4vul30.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.6nc5p5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.ajkqym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.dgmeec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.fhalul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.gxemzv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.gzj7001.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.hxsbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.ijowbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.jxvstx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.khbsvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.kqstye.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.mbruzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.metabrain.group"; content:"Host"; http_header; classtype:attempted-recon; sid:200030369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.ohmatb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.osnolv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.qogdsq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.sblr001.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.sd2ed.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.tbktyg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.tdenvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.tmwhe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.vkzvur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.zlsrwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.zwddtp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaecescssceoe.saasacesceoorr.zxj4025.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.2uz8yl.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.6nc5p5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.dxsahh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.eoamsf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.evcinc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.fhalul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.gyzt802.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.hcoklg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.hlsmyl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.ioxzyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.k43e5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.l1ldvy.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200030393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.lgn09m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.metabrain.group"; content:"Host"; http_header; classtype:attempted-recon; sid:200030395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.mwsxcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.njhpgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.noqaub.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.ohmatb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.orhznj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.ptohrn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.q04nkf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.rbqvre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.rsnhxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.sblr007.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.sgnqqe.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200030406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.slbggp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.tdenvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.umkykk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.voezvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.vtcgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.wcidvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.ykjclz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiascsceoe.sacacseocriaas.zlsrwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiescssceoe.saacacesceoorr.2fx3p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiescssceoe.saacacesceoorr.anl7ya.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiescssceoe.saacacesceoorr.cjxmoz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiescssceoe.saacacesceoorr.dkvvuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiescssceoe.saacacesceoorr.ebmedia.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiescssceoe.saacacesceoorr.ebqzws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiescssceoe.saacacesceoorr.fjmcxh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiescssceoe.saacacesceoorr.gmgjkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiescssceoe.saacacesceoorr.gyzt802.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiescssceoe.saacacesceoorr.hlsmyl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiescssceoe.saacacesceoorr.iiyqmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiescssceoe.saacacesceoorr.mivflz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiescssceoe.saacacesceoorr.nfffte.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiescssceoe.saacacesceoorr.ppvlmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiescssceoe.saacacesceoorr.sblr001.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiescssceoe.saacacesceoorr.sd2ed.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiescssceoe.saacacesceoorr.slbggp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiescssceoe.saacacesceoorr.tvvghs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiescssceoe.saacacesceoorr.vkzvur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiescssceoe.saacacesceoorr.vr0rx.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaeiescssceoe.saacacesceoorr.vtcgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaicasecsesoe.sascaseoeacioras.6nc5p5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaicasecsesoe.sascaseoeacioras.anl7ya.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaicasecsesoe.sascaseoeacioras.cdfsiejkf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaicasecsesoe.sascaseoeacioras.dtyweh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaicasecsesoe.sascaseoeacioras.dzerdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaicasecsesoe.sascaseoeacioras.ebqzws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaicasecsesoe.sascaseoeacioras.fhalul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaicasecsesoe.sascaseoeacioras.fph186.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaicasecsesoe.sascaseoeacioras.gxemzv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaicasecsesoe.sascaseoeacioras.hwzwtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaicasecsesoe.sascaseoeacioras.jxvstx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaicasecsesoe.sascaseoeacioras.khbsvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaicasecsesoe.sascaseoeacioras.metabrain.group"; content:"Host"; http_header; classtype:attempted-recon; sid:200030448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaicasecsesoe.sascaseoeacioras.mivflz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaicasecsesoe.sascaseoeacioras.mwsxcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaicasecsesoe.sascaseoeacioras.ncatge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaicasecsesoe.sascaseoeacioras.osnolv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaicasecsesoe.sascaseoeacioras.q04nkf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaicasecsesoe.sascaseoeacioras.sl86as.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaicasecsesoe.sascaseoeacioras.verse6.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaieacescssceoe.saasaceseoorcraias.dkvvuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaieacescssceoe.saasaceseoorcraias.dxsahh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaieacescssceoe.saasaceseoorcraias.ijowbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaieacescssceoe.saasaceseoorcraias.ioxzyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaieacescssceoe.saasaceseoorcraias.ioyatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaieacescssceoe.saasaceseoorcraias.k43e5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaieacescssceoe.saasaceseoorcraias.khbsvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaieacescssceoe.saasaceseoorcraias.mbruzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaieacescssceoe.saasaceseoorcraias.metabrain.group"; content:"Host"; http_header; classtype:attempted-recon; sid:200030464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaieacescssceoe.saasaceseoorcraias.nbdgwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaieacescssceoe.saasaceseoorcraias.orhznj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaieacescssceoe.saasaceseoorcraias.pctmqj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaieacescssceoe.saasaceseoorcraias.ptohrn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaieacescssceoe.saasaceseoorcraias.qmjded.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaieacescssceoe.saasaceseoorcraias.ruesxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaieacescssceoe.saasaceseoorcraias.sblr005.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaieacescssceoe.saasaceseoorcraias.sblr007.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaieacescssceoe.saasaceseoorcraias.tvvghs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaieacescssceoe.saasaceseoorcraias.zxj4025.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.4-4-j-tyu-uyt.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200030475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.5xvtv1.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.bokqmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.cdfsiejkf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.cdsqma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.cjsuye.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.cyqggi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.hcoklg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.hgpqys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.hxsbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.ia4myc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.iiyqmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.ioyatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.jrignr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.khbsvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.lgn09m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.lmhau8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.nbdgwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.njhpgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.ouomrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.realme.cool"; content:"Host"; http_header; classtype:attempted-recon; sid:200030495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.sd2ed.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200030496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.tbktyg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.tzwpfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.ukqtgw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.vxcgax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaisacseoe.saccsecoiaas.zwddtp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saascsecicaacsrirono.arseaecssoconaooeosnrmaosesonseosiren.ylibav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saasinfor.bvpneu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200030503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sabadellpagofacil.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200030504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sabichao.com.pt"; content:"Host"; http_header; classtype:attempted-recon; sid:200030505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sabordaserramg.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200030506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sac-bradescoprime.info.gf"; content:"Host"; http_header; classtype:attempted-recon; sid:200030507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.bifjvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.bmfobi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.cwjzww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.czwota.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.eefurs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.ehekrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.ejfisj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.euxofr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.fxirgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.gbdoua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.gtplhd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.hstuuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.hzehzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.ikkkdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.imfgws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.iqgaah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.kcjtvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.klvynj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.nhnuoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.oigmja.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.otpyob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.pgoicb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.ptrkur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.qaeftk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.ruwymh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.sdgzim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.taegng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.tmerzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.tvkxwn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.vymalq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.wlkehb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.yjbkym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.zqnwko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccacsaacn.zyiily.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.brjqsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.brzmre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.bxmcgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.ddijxb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.gnhbje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.gokblw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.hbsstk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.jteuyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.kfjzvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.klqtzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.kqdudy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.oexjql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.oprtxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.pyaedh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.pzaujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.sdkpfi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.thxfkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.udmgoo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.vdfsrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.vdwqkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.vfqbjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.vrsjxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.wbmmyr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.wdvbgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.whugav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.wssuzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.wvineh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.xjuqbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.xyzvie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccancsaascnn.ydzfzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.bgxmym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.bjuflz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.bnvgmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.dcrnul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.difoqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.dnugkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.eujone.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.filulm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.hhaqos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.ibazga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.ijvszo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.jhcowo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.nuvgfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.plldej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.potbel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.pzomzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.rrfysn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.tlokjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.ulzxkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.uzybsw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.vrhhjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.xpccuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.xqildh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.ymuffl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.ynrggf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.zopxwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciccscaan.zouwot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.aflbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.cplnnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.eqcegi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.fhvsxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.gzwlap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.hfibhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.hxhovm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.iypfck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.izhfml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.kizugj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.lrifom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.mjtgxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.nncntf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.rauufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.rhbecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.sficyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.sgtgzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.smitfz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.uhameo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.vkaozv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.wkyxva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.wrvclc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.xbkiuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.xbpqdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.xujfxi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.ycvzbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacn.zadadc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.bmfobi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.czwota.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.eefurs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.ejfisj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.euxofr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.fxirgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.gtplhd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.hstuuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.imfgws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.iqgaah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.jrnmkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.lpqwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.msqzhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.nhnuoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.oigmja.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.otpyob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.ptrkur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.pxgjez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.pynwaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.sdgzim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.taegng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.tmerzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.tvkxwn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.wlkehb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.wpkbmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.xdloga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.xzngwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.yircqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.yjbkym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacsnace.zqnwko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.bmfobi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.cqwnqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.czwota.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.eefurs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.ehekrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.ejfisj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.euxofr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.fxirgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.gbdoua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.gtplhd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.hstuuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.imfgws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.iqgaah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.jrnmkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.kcjtvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.klvynj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.msqzhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.nhnuoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.oigmja.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.pxgjez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.pynwaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.qaeftk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.rkiglj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.ruwymh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.tmerzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.tvkxwn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.vymalq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.wdxrob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.wpkbmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.xdloga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.xzngwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.yircqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceacssace.yjbkym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.atksnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.cplnnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.ddbshs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.dmomwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.eqcegi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.fhvsxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.hfibhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.iyaxwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.iypfck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.joocem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.jppraz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.kfohhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.kizugj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.lrifom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.mjtgxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.mkcvda.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.nqkmwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.pzzlrr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.rauufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.rhbecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.sficyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.sgtgzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.smitfz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.uxubso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.vkaozv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.vvbzuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.wkyxva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.wqugjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.wrvclc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.xjslya.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.xujfxi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceaen.ycvzbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancsnascen.brjqsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancsnascen.brzmre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancsnascen.dqnrrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancsnascen.dsaxki.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancsnascen.gnhbje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancsnascen.gsbskv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancsnascen.hbsstk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancsnascen.iaqtkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancsnascen.klqtzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancsnascen.llhtbi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancsnascen.npljci.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancsnascen.ntjsqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancsnascen.oexjql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancsnascen.oprtxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancsnascen.pzaujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancsnascen.rdgbdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancsnascen.rriiyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancsnascen.sdkpfi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancsnascen.thxfkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancsnascen.vdfsrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancsnascen.vfqbjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancsnascen.wvineh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancsnascen.xjuqbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancsnascen.xyzvie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancsnascen.ypqcrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.brjqsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.brzmre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.gnhbje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.gsbskv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.hbsstk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.iaqtkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.jnkzrk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.jteuyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.klqtzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.llhtbi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.npljci.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.ntjsqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.oexjql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.oprtxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.rdgbdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.rriiyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.sdkpfi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.thxfkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.tluygv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.udmgoo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.vfqbjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.vvfcqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.wbmmyr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.wdvbgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.xeibve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.xjuqbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.xyzvie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.ypqcrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceancssascen.zjywhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.bgxmym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.bjuflz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.cjjnnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.crvjko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.dcrnul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.dnugkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.ennlzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.eujone.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.ftagmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.hhaqos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.hlkhkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.ibazga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.iczrpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.ijvszo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.jhcowo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.kcjedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.mcwort.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.plldej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.pzomzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.rrfysn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.tuzxao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.tvrjrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.umneli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.uzybsw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.xpccuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.xqildh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.ymuffl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.ynrggf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.zopxwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceecnae.zouwot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.cplnnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.ddbshs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.dmomwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.fhvsxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.fiwzfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.hfibhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.hxhovm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.idzmgi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.izhfml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.joocem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.jppraz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.kfohhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.kxdfiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.lrifom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.mjtgxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.nncntf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.nqkmwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.rauufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.sgtgzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.tihcxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.uhameo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.vkaozv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.vvbzuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.wqugjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.wrvclc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.xjslya.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.xzjciy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceocn.ycvzbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.aflbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.atksnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.cplnnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.ddbshs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.dmomwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.eqcegi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.fiwzfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.gzwlap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.hfibhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.hxhovm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.idzmgi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.iyaxwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.iypfck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.izhfml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.joocem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.jppraz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.kizugj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.lrifom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.mjtgxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.nncntf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.nqkmwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.pzzlrr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.rhbecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.sficyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.sgtgzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.tihcxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.uhameo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.vkaozv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.vvbzuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.wkyxva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.wqugjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.wrvclc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.xbkiuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.xjslya.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.xujfxi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.xzjciy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciceoen.zadadc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.aflbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.cplnnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.ddbshs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.eqcegi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.fhvsxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.fiwzfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.hfibhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.hxhovm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.joocem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.kfohhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.kizugj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.kxdfiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.lrifom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.mkcvda.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.nqkmwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.pzzlrr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.rauufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.rhbecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.rixlhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.sgtgzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.smitfz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.uhameo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.vkaozv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.wkyxva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.wrvclc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.xbpqdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.xujfxi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.ycvzbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesas.zadadc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.bifjvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.cqwnqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.cwjzww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.czwota.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.eefurs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.ehekrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.ejfisj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.euxofr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.fxirgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.gtplhd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.imfgws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.iqgaah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.jrnmkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.kcjtvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.klvynj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.lpqwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.msqzhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.oigmja.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.otpyob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.ptrkur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.pynwaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.pywjsj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.qaeftk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.rkiglj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.sdgzim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.taegng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.tmerzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.tvkxwn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.wdxrob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.xdloga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.xzngwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.yircqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesccsnace.yjbkym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.cjjnnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.crvjko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.dcrnul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.difoqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.dnugkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.ennlzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.eujone.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.filulm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.froqpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.ftagmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.hhaqos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.hlkhkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.ibazga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.iczrpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.khanmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.msltuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.oowjsh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.plldej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.potbel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.pzomzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.rrfysn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.tlokjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.tuzxao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.ulzxkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.umneli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.uzybsw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.vrhhjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.xpccuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.xqildh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.zopxwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescnae.zouwot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.bjuflz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.cjjnnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.crvjko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.ennlzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.eujone.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.filulm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.fowknz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.ftagmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.hlkhkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.ibazga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.iczrpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.ijvszo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.kcjedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.khanmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.mcwort.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.msltuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.nuvgfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.oowjsh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.plldej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.potbel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.tlokjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.tuzxao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.ulzxkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.umneli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.uzybsw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.vrhhjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.xpccuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.ymuffl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.ynrggf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.zopxwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicescsae.zouwot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesnccsnsacn.brzmre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesnccsnsacn.bxmcgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesnccsnsacn.dsaxki.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200030999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesnccsnsacn.gsbskv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesnccsnsacn.iaqtkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesnccsnsacn.kfjzvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesnccsnsacn.klqtzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesnccsnsacn.kqdudy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesnccsnsacn.llhtbi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesnccsnsacn.ntjsqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesnccsnsacn.oexjql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesnccsnsacn.oprtxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesnccsnsacn.udmgoo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesnccsnsacn.vdfsrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesnccsnsacn.vfqbjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesnccsnsacn.vvfcqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesnccsnsacn.wbmmyr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesnccsnsacn.wssuzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesnccsnsacn.wvineh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesnccsnsacn.xeibve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesnccsnsacn.xjuqbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicesnccsnsacn.xyzvie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.bmfobi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.cwjzww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.czwota.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.eefurs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.ehekrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.ejfisj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.euxofr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.fxirgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.gbdoua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.hstuuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.ikkkdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.iqgaah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.jrnmkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.kcjtvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.klvynj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.lpqwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.oigmja.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.otpyob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.pgoicb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.pxgjez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.pynwaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.pywjsj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.qaeftk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.rkiglj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.sdgzim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.taegng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.tmerzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.vymalq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.wdxrob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.wpkbmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.xzngwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.yircqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.yjbkym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscace.zqnwko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.bmfobi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.cwjzww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.czwota.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.euxofr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.fxirgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.hzehzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.ikkkdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.imfgws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.kcjtvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.lpqwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.msqzhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.nhnuoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.otpyob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.pgoicb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.ptrkur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.pynwaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.pywjsj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.qaeftk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.rkiglj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.sdgzim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.taegng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.tmerzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.vymalq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.wdxrob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.wlkehb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.wpkbmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.xdloga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.yircqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.zqnwko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsacscacn.zyiily.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.brjqsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.ddijxb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.dqnrrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.gnhbje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.gokblw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.hbsstk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.jnkzrk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.jteuyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.kfjzvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.klqtzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.llhtbi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.npljci.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.oexjql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.oprtxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.rdgbdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.rriiyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.sdkpfi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.thxfkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.vdfsrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.vdwqkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.vrsjxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.vvfcqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.wdvbgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.whugav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.wssuzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.xeibve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.xjuqbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.xyzvie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.ydzfzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.ynuzip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascen.zjywhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.ddijxb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.dqnrrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.dsaxki.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.gokblw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.hbsstk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.iaqtkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.jnkzrk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.kfjzvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.llhtbi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.npljci.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.oexjql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.pyaedh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.pzaujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.rdgbdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.sdkpfi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.tbdqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.thxfkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.udmgoo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.vdfsrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.vdwqkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.vrsjxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.vvfcqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.wbmmyr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.wdvbgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.wssuzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.xyzvie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.ydzfzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.ynuzip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.ypqcrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicsancscascnn.zjywhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.bjuflz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.bnvgmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.crvjko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.dcrnul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.difoqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.eujone.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.filulm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.fowknz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.hhaqos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.ibazga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.ihkuhk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.kcjedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.khanmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.nuvgfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.plldej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.potbel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.pzomzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.rrfysn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.skhmmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.spzyuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.tlokjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.ulzxkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.umneli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.vrhhjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.xpccuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.xqildh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.ymuffl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.ynrggf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccae.zopxwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.bgxmym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.bjuflz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.bnvgmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.cjjnnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.dcrnul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.dfkfpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.difoqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.dnugkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.eujone.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.froqpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.hhaqos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.hlkhkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.ibazga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.ihkuhk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.jhcowo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.kcjedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.khanmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.mcwort.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.msltuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.nuvgfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.oowjsh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.plldej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.potbel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.pzomzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.rrfysn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.skhmmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.spzyuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.tvrjrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.ulzxkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.umneli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.vrhhjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.xpccuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.xqildh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.ymuffl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacicssccan.zouwot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.bmfobi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.cqwnqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.cwjzww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.czwota.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.ehekrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.euxofr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.fxirgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.gbdoua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.hstuuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.hzehzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.ikkkdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.iqgaah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.jrnmkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.kcjtvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.klvynj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.lpqwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.msqzhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.nhnuoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.pgoicb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.pxgjez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.pywjsj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.ruwymh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.sdgzim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.taegng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.tmerzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.tvkxwn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.vymalq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.wpkbmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.xzngwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.yircqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.yjbkym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecacsaacn.zqnwko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecancsaascnn.ddijxb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecancsaascnn.dqnrrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecancsaascnn.dsaxki.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecancsaascnn.gsbskv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecancsaascnn.hbsstk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecancsaascnn.jnkzrk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecancsaascnn.klqtzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecancsaascnn.oexjql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecancsaascnn.pzaujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecancsaascnn.rdgbdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecancsaascnn.sdkpfi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecancsaascnn.tbdqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecancsaascnn.tluygv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecancsaascnn.udmgoo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecancsaascnn.vdfsrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecancsaascnn.vdwqkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecancsaascnn.vrsjxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecancsaascnn.wbmmyr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecancsaascnn.whugav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecancsaascnn.wssuzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecancsaascnn.wvineh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecancsaascnn.xeibve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecancsaascnn.xjuqbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.bgxmym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.bnvgmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.crvjko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.dnugkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.eujone.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.fowknz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.froqpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.hhaqos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.hlkhkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.iczrpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.ihkuhk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.ijvszo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.kcjedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.khanmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.mcwort.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.msltuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.nuvgfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.potbel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.pzomzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.rrfysn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.skhmmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.tuzxao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.tvrjrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.ulzxkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.umneli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.uzybsw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.xpccuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.ymuffl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciecscaan.zopxwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.atksnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.fhvsxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.hfibhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.hxhovm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.idzmgi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.iyaxwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.iypfck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.kfohhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.kizugj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.kxdfiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.lrifom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.mjtgxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.mkcvda.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.nncntf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.nqkmwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.pzzlrr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.rhbecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.rixlhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.sgtgzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.tihcxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.uhameo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.uxubso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.vkaozv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.wkyxva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.wqugjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.wrvclc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.xbkiuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.xbpqdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.xjslya.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.xujfxi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacn.ycvzbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.bifjvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.bmfobi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.cqwnqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.cwjzww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.czwota.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.eefurs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.ehekrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.ejfisj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.euxofr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.fxirgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.gbdoua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.gtplhd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.hzehzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.ikkkdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.iqgaah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.jrnmkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.kcjtvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.klvynj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.msqzhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.oigmja.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.pgoicb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.pxgjez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.pywjsj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.qaeftk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.rkiglj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.sdgzim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.taegng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.tmerzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.tvkxwn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.wdxrob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.wlkehb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.wpkbmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.xdloga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.yircqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.yjbkym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.zqnwko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeacsnace.zyiily.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.aflbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.atksnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.cplnnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.dmomwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.eqcegi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.fhvsxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.fiwzfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.hfibhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.hxhovm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.idzmgi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.iyaxwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.izhfml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.joocem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.kfohhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.kizugj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.kxdfiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.lrifom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.mkcvda.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.nncntf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.nqkmwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.pzzlrr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.rauufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.rhbecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.rixlhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.sficyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.sgtgzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.tihcxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.uxubso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.vkaozv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.wkyxva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.wqugjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.wrvclc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.ycvzbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeaen.zadadc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.brjqsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.brzmre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.dqnrrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.dsaxki.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.gokblw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.iaqtkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.klqtzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.kqdudy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.npljci.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.ntjsqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.pyaedh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.rdgbdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.sdkpfi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.tbdqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.thxfkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.tluygv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.udmgoo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.vdwqkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.vfqbjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.vrsjxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.vvfcqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.wbmmyr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.wdvbgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.whugav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.wssuzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.wvineh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.xeibve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.xyzvie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.ydzfzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeancsnascen.ynuzip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.bgxmym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.bjuflz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.dcrnul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.difoqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.dnugkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.fowknz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.froqpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.hhaqos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.hlkhkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.ibazga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.iczrpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.ijvszo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.kcjedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.khanmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.mcwort.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.oowjsh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.potbel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.pzomzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.rrfysn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.skhmmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.tlokjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.umneli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.uzybsw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.xpccuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.xqildh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.ymuffl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeecnae.zouwot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.aflbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.atksnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.ddbshs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.eqcegi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.gzwlap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.hxhovm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.iypfck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.izhfml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.joocem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.kfohhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.kizugj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.lrifom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.mkcvda.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.rauufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.rixlhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.sficyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.smitfz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.tihcxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.uhameo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.wqugjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.wrvclc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.xjslya.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.xujfxi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.xzjciy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.ycvzbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeocn.zadadc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.aflbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.atksnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.cplnnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.ddbshs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.eqcegi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.fhvsxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.fiwzfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.gzwlap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.hfibhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.idzmgi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.iyaxwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.iypfck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.izhfml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.joocem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.jppraz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.kfohhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.kizugj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.kxdfiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.mjtgxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.nncntf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.nqkmwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.rauufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.rhbecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.rixlhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.sficyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.sgtgzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.uxubso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.vvbzuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.wkyxva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.wrvclc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.xbkiuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.xujfxi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.xzjciy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieeoen.ycvzbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.bifjvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.bmfobi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.eefurs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.ejfisj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.euxofr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.fxirgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.gbdoua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.gtplhd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.hstuuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.hzehzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.imfgws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.iqgaah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.kcjtvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.msqzhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.otpyob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.ptrkur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.pynwaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.pywjsj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.rkiglj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.ruwymh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.tmerzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.tvkxwn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.wdxrob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.xdloga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.xzngwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.yjbkym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.zqnwko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesccsnace.zyiily.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.bgxmym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.bnvgmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.cjjnnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.dcrnul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.dfkfpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.dnugkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.ennlzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.filulm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.fowknz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.froqpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.ftagmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.hhaqos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.hlkhkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.ibazga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.iczrpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.ihkuhk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.ijvszo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.jhcowo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.mcwort.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.msltuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.plldej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.rrfysn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.tlokjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.tuzxao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.umneli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.uzybsw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.xqildh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.ymuffl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.ynrggf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieescnae.zouwot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesnccsnsacn.brjqsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesnccsnsacn.brzmre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesnccsnsacn.jnkzrk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesnccsnsacn.jteuyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesnccsnsacn.kfjzvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesnccsnsacn.klqtzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesnccsnsacn.llhtbi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesnccsnsacn.npljci.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesnccsnsacn.oexjql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesnccsnsacn.pyaedh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesnccsnsacn.tbdqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesnccsnsacn.udmgoo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesnccsnsacn.vdfsrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesnccsnsacn.vrsjxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesnccsnsacn.vvfcqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesnccsnsacn.wbmmyr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesnccsnsacn.wdvbgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesnccsnsacn.whugav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesnccsnsacn.wvineh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesnccsnsacn.xeibve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesnccsnsacn.xjuqbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesnccsnsacn.ypqcrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacieesnccsnsacn.zjywhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.bifjvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.bmfobi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.cqwnqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.czwota.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.eefurs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.ehekrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.ejfisj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.euxofr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.fxirgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.gtplhd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.hstuuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.ikkkdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.imfgws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.iqgaah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.jrnmkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.kcjtvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.lpqwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.oigmja.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.otpyob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.pgoicb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.ptrkur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.pxgjez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.pynwaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.pywjsj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.qaeftk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.rkiglj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.ruwymh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.sdgzim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.taegng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.tmerzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.tvkxwn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.wlkehb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.wpkbmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.xdloga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.yircqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.yjbkym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscace.zqnwko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.bifjvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.cqwnqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.cwjzww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.czwota.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.eefurs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.ejfisj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.fxirgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.gbdoua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.gtplhd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.hstuuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.ikkkdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.imfgws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.jrnmkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.kcjtvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.nhnuoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.oigmja.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.pgoicb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.ptrkur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.pxgjez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.pynwaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.pywjsj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.qaeftk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.rkiglj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.sdgzim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.taegng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.vymalq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.wlkehb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.wpkbmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.xdloga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.yircqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.yjbkym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesacscacn.zqnwko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.brzmre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.bxmcgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.ddijxb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.gnhbje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.gokblw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.gsbskv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.iaqtkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.jteuyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.kfjzvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.klqtzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.kqdudy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.llhtbi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.npljci.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.oprtxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.rdgbdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.rriiyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.sdkpfi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.tluygv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.udmgoo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.vdfsrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.vdwqkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.vfqbjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.wdvbgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.whugav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.wssuzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.wvineh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.xeibve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.xjuqbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.xyzvie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.ydzfzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.ynuzip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascen.ypqcrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.brzmre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.bxmcgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.dsaxki.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.gnhbje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.gsbskv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.hbsstk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.iaqtkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.jteuyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.kfjzvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.klqtzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.kqdudy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.llhtbi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.npljci.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.oprtxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.pzaujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.rdgbdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.sdkpfi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.tbdqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.thxfkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.vdfsrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.wbmmyr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.wdvbgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.wssuzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.wvineh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.xeibve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.xjuqbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.ydzfzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciesancscascnn.zjywhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.bjuflz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.bnvgmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.crvjko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.dcrnul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.dfkfpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.difoqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.dnugkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.ennlzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.eujone.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.filulm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.froqpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.hhaqos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.ibazga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.iczrpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.ihkuhk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.ijvszo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.kcjedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.khanmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.mcwort.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.msltuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.nuvgfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.oowjsh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.plldej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.pzomzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.rrfysn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.skhmmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.tuzxao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.tvrjrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.ulzxkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.uzybsw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.vrhhjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.xqildh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.ymuffl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.ynrggf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccae.zouwot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.bgxmym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.bjuflz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.bnvgmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.cjjnnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.crvjko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.dfkfpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.ennlzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.filulm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.froqpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.hhaqos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.ibazga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.ihkuhk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.ijvszo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.jhcowo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.kcjedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.khanmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.mcwort.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.plldej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.potbel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.pzomzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.skhmmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.spzyuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.tlokjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.tuzxao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.ulzxkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.umneli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.ymuffl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.zopxwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciessccan.zouwot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.bifjvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.bmfobi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.cqwnqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.cwjzww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.czwota.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.eefurs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.ejfisj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.gbdoua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.hzehzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.imfgws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.iqgaah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.jrnmkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.kcjtvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.klvynj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.lpqwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.msqzhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.nhnuoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.oigmja.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.otpyob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.pgoicb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.ptrkur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.pxgjez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.pynwaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.qaeftk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.ruwymh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.taegng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.tmerzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.tvkxwn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.wdxrob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.wpkbmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.xzngwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.yircqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.zqnwko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscacsaacn.zyiily.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.brzmre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.bxmcgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.ddijxb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.dsaxki.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.gnhbje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.gokblw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.hbsstk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.jnkzrk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.jteuyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.kqdudy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.npljci.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.oprtxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.pyaedh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.pzaujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.rdgbdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.sdkpfi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.tbdqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.thxfkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.tluygv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.udmgoo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.vdfsrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.vfqbjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.vrsjxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.vvfcqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.wbmmyr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.xeibve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.ydzfzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.ypqcrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscancsaascnn.zjywhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.cjjnnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.crvjko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.dcrnul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.dfkfpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.difoqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.dnugkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.eujone.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.filulm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.fowknz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.ftagmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.hhaqos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.hlkhkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.iczrpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.ijvszo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.kcjedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.khanmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.msltuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.nuvgfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.potbel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.pzomzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.rrfysn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.spzyuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.tlokjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.tuzxao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.tvrjrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.umneli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.vrhhjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.xqildh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.ymuffl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.ynrggf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.zopxwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciscscaan.zouwot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.aflbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.atksnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.cplnnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.dmomwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.fhvsxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.gzwlap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.hxhovm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.iyaxwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.iypfck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.izhfml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.joocem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.jppraz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.kfohhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.kizugj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.kxdfiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.lrifom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.mjtgxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.mkcvda.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.nncntf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.pzzlrr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.rauufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.rhbecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.sficyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.sgtgzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.smitfz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.tihcxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.uhameo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.uxubso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.vkaozv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.vvbzuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.xbkiuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.xbpqdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.xjslya.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.xujfxi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacn.ycvzbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.bifjvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.bmfobi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.czwota.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.eefurs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.ehekrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.euxofr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.gtplhd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.hstuuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.hzehzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.ikkkdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.imfgws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.jrnmkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.kcjtvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.lpqwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.msqzhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.ptrkur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.pxgjez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.pynwaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.pywjsj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.rkiglj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.ruwymh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.taegng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.tvkxwn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.vymalq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.wlkehb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.wpkbmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.xdloga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.yircqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.yjbkym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacsnace.zyiily.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.czwota.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.eefurs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.ejfisj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.euxofr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.fxirgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.gbdoua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.gtplhd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.hstuuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.iqgaah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.jrnmkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.kcjtvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.klvynj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.lpqwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.msqzhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.nhnuoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.otpyob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.pgoicb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.ptrkur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.pxgjez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.pynwaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.pywjsj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.qaeftk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.rkiglj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.tmerzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.tvkxwn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.wlkehb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.wpkbmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.xzngwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.yircqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.zqnwko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseacssace.zyiily.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.aflbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.cplnnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.dmomwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.eqcegi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.fhvsxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.fiwzfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.iyaxwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.iypfck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.izhfml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.joocem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.jppraz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.kxdfiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.lrifom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.nncntf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.pzzlrr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.rauufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.rhbecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200031999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.rixlhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.sficyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.sgtgzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.smitfz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.tihcxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.uxubso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.vkaozv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.wqugjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.xbkiuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.xbpqdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.xjslya.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.xzjciy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.ycvzbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseaen.zadadc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.dqnrrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.dsaxki.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.gnhbje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.gokblw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.gsbskv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.hbsstk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.iaqtkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.kfjzvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.klqtzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.kqdudy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.llhtbi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.npljci.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.oprtxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.pyaedh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.rdgbdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.rriiyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.tluygv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.udmgoo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.vdfsrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.vfqbjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.vrsjxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.vvfcqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.wbmmyr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.wdvbgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.whugav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.xjuqbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.xyzvie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.ydzfzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.ynuzip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.ypqcrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancsnascen.zjywhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.brjqsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.brzmre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.bxmcgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.dqnrrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.gnhbje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.gokblw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.gsbskv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.iaqtkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.klqtzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.npljci.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.ntjsqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.pyaedh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.rdgbdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.rriiyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.sdkpfi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.thxfkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.tluygv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.vfqbjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.vrsjxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.vvfcqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.whugav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.wssuzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.xeibve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.ydzfzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.ynuzip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.ypqcrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseancssascen.zjywhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.bjuflz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.crvjko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.dcrnul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.dfkfpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.difoqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.ennlzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.fowknz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.froqpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.ftagmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.hlkhkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.iczrpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.ijvszo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.khanmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.msltuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.nuvgfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.oowjsh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.rrfysn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.skhmmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.tvrjrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.ulzxkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.umneli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.uzybsw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.vrhhjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.xqildh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.ymuffl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecnae.zouwot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.bgxmym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.crvjko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.dfkfpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.difoqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.dnugkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.ennlzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.filulm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.hhaqos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.ibazga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.iczrpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.ihkuhk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.ijvszo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.kcjedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.mcwort.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.msltuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.nuvgfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.oowjsh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.plldej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.potbel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.rrfysn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.skhmmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.spzyuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.tlokjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.tuzxao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.ulzxkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.umneli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.vrhhjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.ymuffl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.ynrggf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseecsae.zouwot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseocn.atksnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseocn.cplnnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseocn.ddbshs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseocn.eqcegi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseocn.fiwzfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseocn.hfibhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseocn.idzmgi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseocn.joocem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseocn.jppraz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseocn.kfohhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseocn.kizugj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseocn.kxdfiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseocn.mjtgxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseocn.mkcvda.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseocn.nqkmwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseocn.rauufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseocn.sficyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseocn.sgtgzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseocn.uhameo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseocn.uxubso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseocn.vkaozv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseocn.wrvclc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseocn.xjslya.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseocn.zadadc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.atksnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.cplnnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.ddbshs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.fiwzfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.gzwlap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.hfibhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.hxhovm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.idzmgi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.izhfml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.joocem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.jppraz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.kfohhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.kxdfiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.lrifom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.nncntf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.nqkmwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.pzzlrr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.rauufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.rixlhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.sficyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.sgtgzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.vkaozv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.vvbzuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.wkyxva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.wqugjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.wrvclc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.xbkiuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.xbpqdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.xjslya.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.xujfxi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.xzjciy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.ycvzbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saciseoen.zadadc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.aflbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.atksnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.cplnnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.ddbshs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.fhvsxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.fiwzfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.gzwlap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.iyaxwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.iypfck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.joocem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.jppraz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.kfohhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.kizugj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.kxdfiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.nncntf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.pzzlrr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.rauufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.sgtgzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.smitfz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.tihcxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.uhameo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.uxubso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.vvbzuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.wkyxva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.xbkiuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.xbpqdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.xjslya.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.xujfxi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesas.ycvzbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.bifjvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.bmfobi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.cqwnqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.eefurs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.ehekrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.euxofr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.fxirgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.gbdoua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.gtplhd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.hzehzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.ikkkdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.imfgws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.iqgaah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.kcjtvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.klvynj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.lpqwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.msqzhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.nhnuoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.ptrkur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.pxgjez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.pynwaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.pywjsj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.ruwymh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.sdgzim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.tmerzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.vymalq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.wlkehb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.xdloga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccsnace.yircqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.bifjvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.bmfobi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.cqwnqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.cwjzww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.czwota.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.eefurs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.euxofr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.gbdoua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.gtplhd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.hstuuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.hzehzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.ikkkdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.imfgws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.jrnmkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.klvynj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.lpqwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.msqzhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.pgoicb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.pxgjez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.pynwaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.pywjsj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.rkiglj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.ruwymh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.taegng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.vymalq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.wdxrob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.wlkehb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.xdloga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.xzngwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.yjbkym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.zqnwko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesccssace.zyiily.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.cplnnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.ddbshs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.eqcegi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.fhvsxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.fiwzfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.gzwlap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.hxhovm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.idzmgi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.iyaxwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.iypfck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.izhfml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.joocem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.kfohhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.kizugj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.kxdfiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.lrifom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.mjtgxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.mkcvda.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.nqkmwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.rixlhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.tihcxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.uhameo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.uxubso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.vkaozv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.wqugjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.wrvclc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.xbkiuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.xujfxi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.ycvzbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescn.zadadc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.bgxmym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.bnvgmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.crvjko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.dnugkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.ennlzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.eujone.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.fowknz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.froqpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.iczrpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.ihkuhk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.ijvszo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.khanmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.msltuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.nuvgfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.oowjsh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.pzomzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.rrfysn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.skhmmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.tvrjrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.ulzxkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.vrhhjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.xpccuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.ymuffl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.ynrggf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.zopxwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescnae.zouwot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.bgxmym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.bjuflz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.bnvgmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.dcrnul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.dfkfpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.filulm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.fowknz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.froqpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.ftagmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.ihkuhk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.ijvszo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.kcjedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.khanmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.mcwort.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.msltuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.nuvgfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.oowjsh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.plldej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.potbel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.skhmmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.spzyuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.tlokjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.tuzxao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.ulzxkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.umneli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisescsae.xpccuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.atksnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.ddbshs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.dmomwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.fhvsxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.gzwlap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.iyaxwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.iypfck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.joocem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.jppraz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.kfohhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.kizugj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.kxdfiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.lrifom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.mkcvda.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.nncntf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.pzzlrr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.rauufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.rixlhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.sficyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.sgtgzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.tihcxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.uxubso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.vkaozv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.vvbzuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.wkyxva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.wrvclc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.xbpqdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.xjslya.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.xzjciy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesen.ycvzbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.brjqsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.ddijxb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.dqnrrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.gokblw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.hbsstk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.iaqtkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.klqtzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.kqdudy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.llhtbi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.npljci.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.oprtxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.pyaedh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.pzaujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.rriiyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.tluygv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.udmgoo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.vdfsrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.vrsjxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.wbmmyr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.wdvbgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.whugav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.wssuzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.wvineh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.xjuqbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.xyzvie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.ydzfzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.ynuzip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsnsacn.zjywhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.brzmre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.bxmcgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.ddijxb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.dqnrrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.gnhbje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.gokblw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.hbsstk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.jnkzrk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.jteuyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.llhtbi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.npljci.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.ntjsqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.pyaedh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.pzaujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.rriiyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.sdkpfi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.tluygv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.vfqbjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.vvfcqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.wbmmyr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.whugav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.wssuzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.ydzfzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.ynuzip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.ypqcrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisesnccsssacn.zjywhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacn.aflbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacn.ddbshs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacn.dmomwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacn.fiwzfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacn.hfibhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacn.hxhovm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacn.idzmgi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacn.iypfck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacn.izhfml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacn.kxdfiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacn.lrifom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacn.mjtgxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacn.nqkmwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacn.rauufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacn.rhbecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacn.sficyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacn.smitfz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacn.uxubso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacn.vkaozv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacn.wkyxva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacn.wrvclc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacn.xbkiuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacn.xbpqdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacn.xjslya.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacn.xzjciy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.bifjvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.bmfobi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.cqwnqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.cwjzww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.czwota.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.eefurs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.ehekrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.ejfisj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.gbdoua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.gtplhd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.hstuuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.ikkkdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.imfgws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.jrnmkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.lpqwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.msqzhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.nhnuoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.oigmja.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.pgoicb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.ptrkur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.pynwaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.pywjsj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.qaeftk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.rkiglj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.sdgzim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.taegng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.tmerzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.tvkxwn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.vymalq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.wpkbmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.xdloga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.xzngwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.yircqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.yjbkym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.zqnwko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacsnace.zyiily.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.bifjvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.bmfobi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.cwjzww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.euxofr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.fxirgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.gbdoua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.gtplhd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.hzehzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.ikkkdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.imfgws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.iqgaah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.jrnmkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.klvynj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.lpqwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.msqzhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.nhnuoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.ptrkur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.pynwaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.qaeftk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.sdgzim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.tmerzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.tvkxwn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.vymalq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.wdxrob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.wpkbmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.xdloga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.xzngwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.yircqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.yjbkym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.zqnwko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoacssace.zyiily.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.aflbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.atksnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.cplnnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.ddbshs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.dmomwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.fhvsxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.gzwlap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.hfibhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.hxhovm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.idzmgi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.iyaxwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.iypfck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.jppraz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.kfohhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.kizugj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.kxdfiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.lrifom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.mjtgxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.mkcvda.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.nncntf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.nqkmwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.pzzlrr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.rauufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.sficyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.smitfz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.uhameo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.uxubso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.vkaozv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.vvbzuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.wqugjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.wrvclc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.xbkiuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.xbpqdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.xujfxi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.xzjciy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.ycvzbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoaen.zadadc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.brjqsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.brzmre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.gokblw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.jteuyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.kfjzvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.kqdudy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.llhtbi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.npljci.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.ntjsqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.oexjql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.oprtxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.pzaujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.sdkpfi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.tbdqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.tluygv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.udmgoo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.vdwqkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.vrsjxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.wbmmyr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.wdvbgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.whugav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.wssuzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.wvineh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.xeibve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.xjuqbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.ynuzip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancsnascen.ypqcrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.brjqsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.dsaxki.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.gsbskv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.iaqtkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.jnkzrk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.jteuyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.kfjzvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.kqdudy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.llhtbi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.npljci.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.ntjsqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.oexjql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.pzaujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.rdgbdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.sdkpfi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.tbdqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.thxfkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.tluygv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.vdfsrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.vfqbjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.vrsjxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.vvfcqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.wbmmyr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.wdvbgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.whugav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.wssuzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.wvineh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.ynuzip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoancssascen.zjywhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.bjuflz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.bnvgmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.crvjko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.dfkfpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.dnugkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.ennlzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.eujone.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.filulm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.fowknz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.froqpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.hhaqos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.ibazga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.iczrpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.ijvszo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.jhcowo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.mcwort.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.msltuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.oowjsh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.plldej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.skhmmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.spzyuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.tuzxao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.tvrjrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.umneli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.uzybsw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.vrhhjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.xpccuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.ymuffl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoecnae.zouwot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.aflbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.cplnnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.ddbshs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.eqcegi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.fhvsxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.hfibhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.idzmgi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.joocem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.jppraz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.kfohhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.kxdfiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.lrifom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.mjtgxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.mkcvda.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.rauufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.rhbecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.rixlhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.sficyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.sgtgzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.smitfz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.uhameo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.uxubso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.vvbzuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.wkyxva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.wqugjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.wrvclc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.xbkiuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.xbpqdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.xjslya.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.xzjciy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoocn.zadadc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.cplnnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.dmomwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.eqcegi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.fhvsxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.fiwzfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.gzwlap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.iyaxwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.izhfml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.joocem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.jppraz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.kfohhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.kizugj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.kxdfiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.lrifom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.mjtgxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.nqkmwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.pzzlrr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.rhbecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.tihcxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.uhameo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.uxubso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.vvbzuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.wrvclc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.xbpqdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.xjslya.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.xujfxi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.xzjciy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.ycvzbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisooen.zadadc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.cplnnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.ddbshs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.dmomwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.eqcegi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.fhvsxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.fiwzfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.iyaxwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.izhfml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.joocem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.kfohhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.kizugj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.kxdfiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.mkcvda.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.nncntf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.nqkmwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.pzzlrr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.sficyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.smitfz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.uhameo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.vkaozv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.vvbzuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.wkyxva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.wqugjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.wrvclc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.xjslya.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.ycvzbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosas.zadadc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.bifjvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.cwjzww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.czwota.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.eefurs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.ehekrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.euxofr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.fxirgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.gbdoua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.hstuuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.hzehzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.ikkkdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.iqgaah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.jrnmkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.lpqwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.msqzhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.oigmja.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.otpyob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.pxgjez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.pynwaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.pywjsj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.qaeftk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.rkiglj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.sdgzim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.tmerzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.tvkxwn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.wdxrob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.xzngwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.yjbkym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosccsnace.zyiily.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.bgxmym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.bnvgmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.crvjko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.dfkfpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.difoqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.eujone.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.filulm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.froqpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.ftagmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.hhaqos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.hlkhkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.ibazga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.iczrpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.ihkuhk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.jhcowo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.khanmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.mcwort.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.msltuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.nuvgfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.plldej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.pzomzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.skhmmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.spzyuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.tlokjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.tuzxao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.umneli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.xqildh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.ymuffl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.ynrggf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscnae.zouwot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.bgxmym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.bjuflz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.bnvgmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.dcrnul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.dnugkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.filulm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.fowknz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.froqpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.ftagmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.hhaqos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.hlkhkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.ibazga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.iczrpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.ihkuhk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.ijvszo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.khanmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.mcwort.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.msltuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.nuvgfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.oowjsh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.plldej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.potbel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.pzomzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.rrfysn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.spzyuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.tlokjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.ulzxkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.umneli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.uzybsw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.vrhhjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.xpccuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.ynrggf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.zopxwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisoscsae.zouwot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.brjqsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.brzmre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.dqnrrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.gnhbje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.gokblw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.gsbskv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.hbsstk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.jnkzrk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.klqtzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.kqdudy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.npljci.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.ntjsqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.oexjql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.oprtxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.pyaedh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.pzaujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.rdgbdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.rriiyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.thxfkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.udmgoo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.vfqbjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.wdvbgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.whugav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.wssuzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.wvineh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.xeibve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.xjuqbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.xyzvie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.ydzfzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.ynuzip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.ypqcrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisosnccsnsacn.zjywhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.aflbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.cplnnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.ddbshs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.eqcegi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.fhvsxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.fiwzfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.gzwlap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.hfibhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.hxhovm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.idzmgi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.iyaxwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.izhfml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.jppraz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.kxdfiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.lrifom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.mkcvda.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.rauufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.rixlhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.sficyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.sgtgzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.smitfz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.uxubso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.vkaozv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.vvbzuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.wkyxva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.wqugjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.xbkiuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.xbpqdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.xjslya.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.xujfxi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.xzjciy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacn.zadadc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.bifjvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.bmfobi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.cqwnqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.cwjzww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.eefurs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.ejfisj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.gbdoua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.hstuuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.ikkkdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.imfgws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.iqgaah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.kcjtvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.klvynj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.msqzhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.nhnuoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.oigmja.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.otpyob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.pgoicb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.ptrkur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.pywjsj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.rkiglj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.ruwymh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.sdgzim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.taegng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.tmerzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.tvkxwn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.vymalq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.wlkehb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.wpkbmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.xdloga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.xzngwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.yircqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscace.zyiily.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.bifjvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.eefurs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.ehekrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.euxofr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.fxirgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.gbdoua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.gtplhd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.hzehzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.ikkkdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.imfgws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.jrnmkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.kcjtvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.lpqwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.msqzhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.nhnuoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.otpyob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.pgoicb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.ptrkur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.pxgjez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.pynwaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.rkiglj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.taegng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.tmerzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.tvkxwn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.vymalq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.wdxrob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.wlkehb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.wpkbmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.xdloga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.xzngwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.yircqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.yjbkym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacscacn.zyiily.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.bifjvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.bmfobi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.cwjzww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.czwota.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.eefurs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.ejfisj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.euxofr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.fxirgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.gbdoua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.gtplhd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.hstuuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.hzehzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.ikkkdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.iqgaah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.jrnmkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.kcjtvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.klvynj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.msqzhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.nhnuoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.otpyob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.pywjsj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.qaeftk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.rkiglj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.taegng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.tvkxwn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.vymalq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.wdxrob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.wlkehb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200032999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.wpkbmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.xzngwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacsnace.zqnwko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.bifjvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.bmfobi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.cwjzww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.czwota.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.eefurs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.ehekrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.gtplhd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.hstuuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.hzehzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.ikkkdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.imfgws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.iqgaah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.jrnmkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.kcjtvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.klvynj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.lpqwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.msqzhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.oigmja.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.otpyob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.pgoicb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.ptrkur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.pxgjez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.rkiglj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.ruwymh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.taegng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.tmerzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.tvkxwn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.wdxrob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.wlkehb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.wpkbmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.xzngwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissacssace.zqnwko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.atksnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.cplnnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.fhvsxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.fiwzfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.hfibhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.hxhovm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.idzmgi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.iyaxwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.iypfck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.izhfml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.joocem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.jppraz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.kizugj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.kxdfiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.lrifom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.mjtgxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.mkcvda.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.pzzlrr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.rauufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.rhbecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.sficyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.sgtgzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.smitfz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.uhameo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.uxubso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.vkaozv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.vvbzuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.wkyxva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.wqugjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.xjslya.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.xzjciy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.ycvzbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissaen.zadadc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.brjqsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.brzmre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.bxmcgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.ddijxb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.dsaxki.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.gnhbje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.gokblw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.gsbskv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.hbsstk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.jnkzrk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.jteuyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.kfjzvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.klqtzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.npljci.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.oexjql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.oprtxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.pzaujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.rdgbdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.sdkpfi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.tbdqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.tluygv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.vdfsrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.vdwqkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.vfqbjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.vrsjxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.vvfcqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.whugav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.wssuzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.wvineh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.xyzvie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.ydzfzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.ypqcrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascen.zjywhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.brjqsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.brzmre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.bxmcgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.ddijxb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.dqnrrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.gnhbje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.gokblw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.gsbskv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.kqdudy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.llhtbi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.npljci.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.ntjsqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.oprtxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.pyaedh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.rdgbdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.rriiyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.tbdqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.thxfkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.tluygv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.udmgoo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.vdfsrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.vrsjxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.vvfcqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.wbmmyr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.whugav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.wssuzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.xeibve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.xyzvie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.ydzfzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.ynuzip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.ypqcrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancscascnn.zjywhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.brzmre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.bxmcgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.ddijxb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.gnhbje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.gsbskv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.hbsstk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.jnkzrk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.kqdudy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.llhtbi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.npljci.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.oexjql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.oprtxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.pyaedh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.pzaujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.rdgbdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.rriiyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.tluygv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.vdfsrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.vdwqkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.vfqbjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.vrsjxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.vvfcqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.whugav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.xeibve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.xjuqbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.xyzvie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.ynuzip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancsnascen.ypqcrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.brjqsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.brzmre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.ddijxb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.dqnrrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.dsaxki.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.gnhbje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.gokblw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.gsbskv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.iaqtkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.jteuyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.kfjzvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.kqdudy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.llhtbi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.npljci.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.ntjsqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.oprtxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.pyaedh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.pzaujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.rdgbdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.rriiyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.sdkpfi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.tbdqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.tluygv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.udmgoo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.vdwqkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.vfqbjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.wdvbgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.whugav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.wssuzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.xjuqbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.xyzvie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissancssascen.zjywhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.bgxmym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.cjjnnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.dfkfpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.difoqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.dnugkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.ennlzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.eujone.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.fowknz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.ftagmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.hlkhkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.ihkuhk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.ijvszo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.jhcowo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.kcjedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.khanmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.mcwort.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.nuvgfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.plldej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.potbel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.pzomzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.rrfysn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.skhmmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.spzyuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.tlokjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.tuzxao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.tvrjrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.umneli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.uzybsw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.vrhhjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.xpccuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.xqildh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.ymuffl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecnae.zouwot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.bgxmym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.cjjnnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.crvjko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.dfkfpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.dnugkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.ennlzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.eujone.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.filulm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.froqpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.ftagmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.ibazga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.ihkuhk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.ijvszo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.jhcowo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.kcjedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.mcwort.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.msltuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.oowjsh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.potbel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.pzomzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.rrfysn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.skhmmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.tlokjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.tvrjrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.ulzxkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.umneli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.uzybsw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.xpccuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.ynrggf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissecsae.zopxwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.aflbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.atksnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.ddbshs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.eqcegi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.fhvsxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.fiwzfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.hfibhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.hxhovm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.idzmgi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.izhfml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.joocem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.jppraz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.kfohhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.lrifom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.nncntf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.rhbecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.rixlhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.sficyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.tihcxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.uhameo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.vkaozv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.wkyxva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.wrvclc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.xbkiuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.xbpqdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.xjslya.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.xujfxi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.xzjciy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.ycvzbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissocn.zadadc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.atksnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.cplnnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.ddbshs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.dmomwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.fhvsxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.fiwzfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.hxhovm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.jppraz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.kfohhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.kizugj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.kxdfiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.lrifom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.mkcvda.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.nqkmwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.rauufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.rixlhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.sgtgzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.tihcxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.uxubso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.vkaozv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.vvbzuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.wkyxva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.wqugjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.xbkiuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.xjslya.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.xujfxi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.xzjciy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissoen.ycvzbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.bgxmym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.bnvgmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.cjjnnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.dcrnul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.dfkfpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.difoqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.dnugkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.ennlzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.eujone.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.filulm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.fowknz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.hhaqos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.ibazga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.iczrpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.ihkuhk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.jhcowo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.kcjedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.khanmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.mcwort.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.nuvgfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.oowjsh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.plldej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.potbel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.pzomzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.rrfysn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.skhmmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.spzyuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.tvrjrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.umneli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.uzybsw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.vrhhjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.xqildh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.ymuffl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccae.zouwot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.bgxmym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.bjuflz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.dcrnul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.dfkfpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.dnugkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.filulm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.fowknz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.froqpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.ftagmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.hhaqos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.hlkhkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.ibazga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.iczrpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.ihkuhk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.jhcowo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.khanmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.msltuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.nuvgfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.oowjsh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.plldej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.potbel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.rrfysn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.skhmmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.tuzxao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.ulzxkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.umneli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.uzybsw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.vrhhjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.ymuffl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.ynrggf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.zopxwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccan.zouwot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.bifjvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.bmfobi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.cqwnqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.cwjzww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.czwota.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.eefurs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.ejfisj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.euxofr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.fxirgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.gbdoua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.imfgws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.iqgaah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.klvynj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.lpqwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.nhnuoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.oigmja.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.pgoicb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.ptrkur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.pxgjez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.pynwaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.pywjsj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.qaeftk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.rkiglj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.ruwymh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.taegng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.tmerzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.vymalq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.wlkehb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.wpkbmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.xdloga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.yjbkym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.zqnwko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccsnace.zyiily.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.bifjvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.bmfobi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.cwjzww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.eefurs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.ehekrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.euxofr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.fxirgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.gbdoua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.gtplhd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.hzehzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.ikkkdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.jrnmkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.kcjtvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.klvynj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.lpqwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.msqzhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.otpyob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.pgoicb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.ptrkur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.pynwaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.pywjsj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.qaeftk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.rkiglj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.ruwymh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.taegng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.tmerzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.wdxrob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.wpkbmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.xdloga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.xzngwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.yircqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssccssace.yjbkym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.bgxmym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.bjuflz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.crvjko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.difoqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.dnugkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.eujone.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.froqpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.hhaqos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.ibazga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.iczrpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.ijvszo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.jhcowo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.kcjedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.khanmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.msltuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.nuvgfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.plldej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.potbel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.rrfysn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.spzyuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.tuzxao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.tvrjrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.umneli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.uzybsw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.vrhhjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.xpccuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.xqildh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.ynrggf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.zopxwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscnae.zouwot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.bgxmym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.bjuflz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.bnvgmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.cjjnnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.dcrnul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.dfkfpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.difoqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.eujone.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.filulm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.fowknz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.ftagmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.hlkhkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.ihkuhk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.jhcowo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.khanmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.msltuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.oowjsh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.plldej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.potbel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.pzomzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.skhmmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.tlokjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.tvrjrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.umneli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.uzybsw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.vrhhjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.xpccuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.ynrggf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacissscsae.zouwot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsnsacn.brjqsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsnsacn.bxmcgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsnsacn.gnhbje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsnsacn.gokblw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsnsacn.gsbskv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsnsacn.iaqtkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsnsacn.kfjzvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsnsacn.kqdudy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsnsacn.llhtbi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsnsacn.oexjql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsnsacn.oprtxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsnsacn.pyaedh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsnsacn.rriiyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsnsacn.tbdqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsnsacn.thxfkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsnsacn.udmgoo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsnsacn.vdfsrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsnsacn.vdwqkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsnsacn.vrsjxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsnsacn.vvfcqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsnsacn.wbmmyr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsnsacn.wdvbgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsnsacn.wssuzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsnsacn.xeibve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsnsacn.zjywhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.brjqsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.brzmre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.bxmcgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.ddijxb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.dsaxki.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.gnhbje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.gsbskv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.hbsstk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.iaqtkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.jnkzrk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.jteuyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.klqtzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.kqdudy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.llhtbi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.npljci.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.ntjsqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.oprtxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.pzaujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.rdgbdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.rriiyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.thxfkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.tluygv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.udmgoo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.vdwqkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.vrsjxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.wbmmyr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.wdvbgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.wssuzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.xyzvie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.ydzfzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.ypqcrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacisssnccsssacn.zjywhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacmhs.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200033567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sacolaprodut09123.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200033568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sada1autoinsurance.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200033569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sadervoyages.intnet.mu"; content:"Host"; http_header; classtype:attempted-recon; sid:200033570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sadf.saf3e.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200033571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sadovxetwi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200033572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"safe-secu.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200033573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"safebridgeassist.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200033574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"safegnosiapp.digital"; content:"Host"; http_header; classtype:attempted-recon; sid:200033575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"safepaltv.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200033576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"safety.oktedi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200033577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"safeurl.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200033578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"safraempresas.com.br.mcas-df.ms"; content:"Host"; http_header; classtype:attempted-recon; sid:200033579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"safty.summarycheck.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200033580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sahabatjayacargo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200033581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sahleymadison.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200033582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sahraaljazeerah.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200033583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaean-co-jp.acseese.aeqmrz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaean-co-jp.acseese.azrbwq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaean-co-jp.acseese.bbjaoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaean-co-jp.acseese.byurlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaean-co-jp.acseese.dkhbub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaean-co-jp.acseese.hxesyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaean-co-jp.acseese.ibzlwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaean-co-jp.acseese.kexpaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaean-co-jp.acseese.mgfvys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaean-co-jp.acseese.orxkxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaean-co-jp.acseese.pmineb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaean-co-jp.acseese.rcmrcm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaean-co-jp.acseese.rcwtyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaean-co-jp.acseese.rfpuac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaean-co-jp.acseese.rpgjkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaean-co-jp.acseese.shenem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaean-co-jp.acseese.sxpzjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaean-co-jp.acseese.uaatqg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaean-co-jp.acseese.wjxjkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaean-co-jp.acseese.xkmdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaean-co-jp.acseese.xsnhjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaecn-co-jp.aeseese.alcuth.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaecn-co-jp.aeseese.bkosbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaecn-co-jp.aeseese.cdkcfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaecn-co-jp.aeseese.dkhbub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaecn-co-jp.aeseese.dmkqui.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaecn-co-jp.aeseese.ibzlwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaecn-co-jp.aeseese.krumxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaecn-co-jp.aeseese.nscsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaecn-co-jp.aeseese.onjoto.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaecn-co-jp.aeseese.rcwtyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaecn-co-jp.aeseese.ttdwdq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaecn-co-jp.aeseese.uaatqg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.acaecesen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaeecn-co-jp.aeaecesen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.acsaeeseen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaencn-co-jp.aesaeeseen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoan-co-jp.acseoese.aeqmrz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoan-co-jp.acseoese.alcuth.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoan-co-jp.acseoese.bbjaoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoan-co-jp.acseoese.dpzuhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoan-co-jp.acseoese.fczquz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoan-co-jp.acseoese.jkonat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoan-co-jp.acseoese.mjbfjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoan-co-jp.acseoese.onjoto.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoan-co-jp.acseoese.pmineb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoan-co-jp.acseoese.tyjlpa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoan-co-jp.acseoese.wclddi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoan-co-jp.acseoese.xsnhjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaocan-co-jp.aesecoese.dkhbub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaocan-co-jp.aesecoese.dmkqui.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaocan-co-jp.aesecoese.orxkxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaocan-co-jp.aesecoese.rcwtyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaocan-co-jp.aesecoese.tyjlpa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaocn-co-jp.aeseoese.aeqmrz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaocn-co-jp.aeseoese.alcuth.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaocn-co-jp.aeseoese.blzdnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaocn-co-jp.aeseoese.dmkqui.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200033999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaocn-co-jp.aeseoese.ebczvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaocn-co-jp.aeseoese.fczquz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaocn-co-jp.aeseoese.hafygf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaocn-co-jp.aeseoese.orxkxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaocn-co-jp.aeseoese.pmineb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaocn-co-jp.aeseoese.rfpuac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaocn-co-jp.aeseoese.urbhth.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaocn-co-jp.aeseoese.xsnhjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.acaecosen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoecn-co-jp.aeaecosen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoeesen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.acsaeoseen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoeesen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoncn-co-jp.aesaeoseen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.acseose.azrbwq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.acseose.bbjaoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.acseose.bkosbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.acseose.darlqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.acseose.dkhbub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.acseose.ibzlwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.acseose.krumxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.acseose.mgfvys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.acseose.nscsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.acseose.pmineb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.acseose.rcmrcm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.acseose.rmzndb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.acseose.tnhwua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.acseose.tyjlpa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.acseose.urbhth.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.aeseose.bkosbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.aeseose.cdkcfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.aeseose.gkzemp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.aeseose.hafygf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.aeseose.iusmdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.aeseose.mgfvys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.aeseose.mjbfjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.aeseose.onjoto.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.aeseose.rcmrcm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.aeseose.rpgjkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.aeseose.sxpzjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.aeseose.tyjlpa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.aeseose.xkmdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiaoon-co-jp.aeseose.zqtwoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasecn-co-jp.aeaccesen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.acoaceseen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiasncn-co-jp.aeoaceseen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.acocese.alcuth.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.acocese.dpzuhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.acocese.ebczvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.acocese.febcbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.acocese.gkzemp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.acocese.hafygf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.acocese.iusmdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.acocese.krumxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.acocese.nxjsgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.acocese.onjoto.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.acocese.pmineb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.acocese.rcmrcm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.acocese.rmzndb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.acocese.tyjlpa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.acocese.xsnhjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.aeocese.aeqmrz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.aeocese.alcuth.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.aeocese.dkhbub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.aeocese.dpzuhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.aeocese.hafygf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.aeocese.ibzlwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.aeocese.kexpaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.aeocese.rcwtyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.aeocese.shenem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.aeocese.tnhwua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.aeocese.tyjlpa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiason-co-jp.aeocese.uaatqg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.jrcngw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.qmjjkr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.vgeijc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.vrdnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aacaordnsee.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aasonse.aeqmrz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aasonse.bbjaoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aasonse.bkosbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aasonse.dkhbub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aasonse.dmkqui.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aasonse.jkonat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aasonse.krumxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aasonse.rmzndb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aasonse.shenem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aasonse.tyjlpa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aasonse.uaatqg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aasonse.wclddi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aasonse.zqtwoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.qmjjkr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.zbnhhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accaordesee.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accardeseen.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accardeseen.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accardeseen.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accardeseen.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accardeseen.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accardeseen.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accardeseen.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accardeseen.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accardeseen.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accardeseen.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accardeseen.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accardeseen.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accardeseen.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accardeseen.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accardeseen.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accardeseen.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accardeseen.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accardeseen.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accardeseen.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accardeseen.zbnhhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.accardeseen.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordesee.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordesee.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordesee.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordesee.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordesee.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordesee.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordesee.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordesee.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordesee.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordesee.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordesee.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordesee.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordesee.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordesee.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordesee.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordesee.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordesee.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordesee.qmjjkr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordesee.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordesee.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordesee.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordesee.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordesee.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordesee.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordesee.zbnhhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordnsee.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordnsee.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordnsee.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordnsee.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordnsee.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordnsee.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordnsee.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordnsee.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordnsee.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordnsee.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordnsee.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordnsee.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordnsee.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordnsee.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordnsee.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordnsee.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordnsee.qmjjkr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordnsee.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordnsee.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordnsee.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordnsee.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordnsee.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordnsee.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordnsee.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecaordnsee.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecardnseen.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecardnseen.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecardnseen.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecardnseen.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecardnseen.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecardnseen.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecardnseen.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecardnseen.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecardnseen.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecardnseen.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecardnseen.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecardnseen.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecardnseen.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecardnseen.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecardnseen.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecardnseen.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecardnseen.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecardnseen.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecardnseen.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecardnseen.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecardnseen.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecardnseen.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicecn-co-jp.aecardnseen.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200034999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aaaocnsen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceecn-co-jp.aeaocnsen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceen-co-jp.aesonse.aeqmrz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceen-co-jp.aesonse.bbjaoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceen-co-jp.aesonse.darlqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceen-co-jp.aesonse.dmkqui.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceen-co-jp.aesonse.dpzuhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceen-co-jp.aesonse.gkzemp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceen-co-jp.aesonse.hafygf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceen-co-jp.aesonse.iusmdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceen-co-jp.aesonse.rcwtyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceen-co-jp.aesonse.rfpuac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceen-co-jp.aesonse.rpgjkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceen-co-jp.aesonse.sxpzjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceen-co-jp.aesonse.urbhth.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceen-co-jp.aesonse.wjxjkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiceen-co-jp.aesonse.xkmdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aasaonseen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicencn-co-jp.aesaonseen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordonese.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordonese.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordonese.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordonese.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordonese.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordonese.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordonese.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordonese.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordonese.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordonese.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordonese.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordonese.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordonese.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordonese.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordonese.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordonese.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordonese.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordonese.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordonese.vgeijc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordonese.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordonese.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.vgeijc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacaordosee.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardonesen.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardonesen.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardonesen.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardonesen.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardonesen.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardonesen.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardonesen.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardonesen.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardonesen.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardonesen.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardonesen.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardonesen.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardonesen.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardonesen.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardonesen.qmjjkr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardonesen.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardonesen.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardonesen.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardonesen.vgeijc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardonesen.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardonesen.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardonesen.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardoseen.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardoseen.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardoseen.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardoseen.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardoseen.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardoseen.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardoseen.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardoseen.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardoseen.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardoseen.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardoseen.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardoseen.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardoseen.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardoseen.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardoseen.qmjjkr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardoseen.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardoseen.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardoseen.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardoseen.vrdnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardoseen.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardoseen.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardoseen.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aacardoseen.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.qmjjkr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.vgeijc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasaordones.zbnhhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasardonese.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasardonese.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasardonese.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasardonese.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasardonese.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasardonese.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasardonese.jrcngw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasardonese.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasardonese.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasardonese.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasardonese.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasardonese.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasardonese.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasardonese.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasardonese.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasardonese.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasardonese.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasardonese.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasardonese.vgeijc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasardonese.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasardonese.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasardonese.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasoonse.dmkqui.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasoonse.krumxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasoonse.mjbfjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasoonse.nscsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasoonse.orxkxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasoonse.rcmrcm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasoonse.rfpuac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasoonse.wjxjkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasoonse.xkmdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasoonse.xsnhjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aasoonse.zqtwoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.vgeijc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.zbnhhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordoeese.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordosee.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordosee.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordosee.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordosee.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordosee.jrcngw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordosee.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordosee.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordosee.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordosee.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordosee.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordosee.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordosee.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordosee.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordosee.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordosee.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordosee.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordosee.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordosee.vgeijc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordosee.vrdnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordosee.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordosee.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordosee.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordosee.zbnhhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accaordosee.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoeesen.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoeesen.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoeesen.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoeesen.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoeesen.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoeesen.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoeesen.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoeesen.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoeesen.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoeesen.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoeesen.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoeesen.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoeesen.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoeesen.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoeesen.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoeesen.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoeesen.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoeesen.vgeijc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoeesen.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoeesen.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoeesen.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoeesen.zbnhhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoseen.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoseen.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoseen.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoseen.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoseen.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoseen.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoseen.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoseen.jrcngw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoseen.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoseen.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoseen.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoseen.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoseen.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoseen.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoseen.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoseen.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoseen.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoseen.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoseen.vgeijc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoseen.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoseen.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.accardoseen.zbnhhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsaordoees.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsaordoees.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsaordoees.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsaordoees.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsaordoees.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsaordoees.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsaordoees.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsaordoees.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsaordoees.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsaordoees.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsaordoees.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsaordoees.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsaordoees.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsaordoees.qmjjkr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsaordoees.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsaordoees.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsaordoees.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsaordoees.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsaordoees.vrdnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsaordoees.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsaordoees.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsaordoees.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsaordoees.zbnhhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsaordoees.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.qmjjkr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.vrdnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.acsardoeese.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.vrdnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.zbnhhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordenese.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.qmjjkr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.vgeijc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.vrdnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.zbnhhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordoeese.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordonese.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordonese.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordonese.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordonese.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordonese.jrcngw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordonese.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordonese.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordonese.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordonese.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordonese.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordonese.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordonese.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordonese.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordonese.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordonese.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordonese.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordonese.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordonese.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordonese.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordonese.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordonese.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordonese.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordonese.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordonese.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordosee.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordosee.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordosee.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordosee.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordosee.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordosee.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordosee.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordosee.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordosee.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordosee.jrcngw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordosee.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordosee.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordosee.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordosee.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordosee.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordosee.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordosee.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordosee.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordosee.vrdnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordosee.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordosee.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordosee.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordosee.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordosee.zbnhhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordsnese.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordsnese.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordsnese.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordsnese.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordsnese.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordsnese.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordsnese.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordsnese.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordsnese.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordsnese.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordsnese.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordsnese.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordsnese.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordsnese.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordsnese.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordsnese.qmjjkr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordsnese.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordsnese.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordsnese.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordsnese.vgeijc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordsnese.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordsnese.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecaordsnese.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.jrcngw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.vrdnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardenesen.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoeesen.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoeesen.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoeesen.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoeesen.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoeesen.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoeesen.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoeesen.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoeesen.jrcngw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoeesen.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoeesen.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoeesen.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoeesen.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoeesen.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoeesen.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoeesen.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoeesen.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoeesen.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoeesen.vgeijc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoeesen.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoeesen.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoeesen.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoeesen.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoeesen.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardonesen.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardonesen.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardonesen.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardonesen.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardonesen.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardonesen.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardonesen.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardonesen.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardonesen.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardonesen.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardonesen.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardonesen.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardonesen.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardonesen.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardonesen.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardonesen.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardonesen.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardonesen.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardonesen.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardonesen.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardonesen.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardonesen.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardonesen.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoseen.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoseen.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoseen.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoseen.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoseen.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoseen.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoseen.jrcngw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoseen.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoseen.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoseen.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoseen.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoseen.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoseen.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoseen.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoseen.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoseen.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoseen.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoseen.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoseen.qmjjkr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoseen.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoseen.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoseen.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoseen.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoseen.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardoseen.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardsnesen.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardsnesen.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardsnesen.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardsnesen.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardsnesen.jrcngw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardsnesen.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardsnesen.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardsnesen.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardsnesen.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardsnesen.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardsnesen.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardsnesen.qmjjkr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardsnesen.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardsnesen.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardsnesen.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardsnesen.vgeijc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardsnesen.vrdnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardsnesen.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardsnesen.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardsnesen.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aecardsnesen.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordenes.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordenes.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordenes.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordenes.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordenes.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordenes.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordenes.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordenes.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordenes.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordenes.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordenes.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordenes.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordenes.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordenes.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordenes.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordenes.vrdnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordenes.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordenes.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.jrcngw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordoees.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordones.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordones.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordones.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordones.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordones.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordones.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordones.jrcngw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordones.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordones.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordones.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordones.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordones.qmjjkr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordones.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordones.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordones.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordones.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordones.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordones.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordones.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordones.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordones.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordones.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordones.zbnhhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordones.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordsnes.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordsnes.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordsnes.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordsnes.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordsnes.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordsnes.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordsnes.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordsnes.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordsnes.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordsnes.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordsnes.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordsnes.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordsnes.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordsnes.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordsnes.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordsnes.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordsnes.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordsnes.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordsnes.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordsnes.vrdnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordsnes.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordsnes.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordsnes.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordsnes.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesaordsnes.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardenese.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardenese.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardenese.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardenese.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardenese.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardenese.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardenese.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardenese.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardenese.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardenese.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardenese.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardenese.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardenese.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardenese.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardenese.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardenese.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardenese.qmjjkr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardenese.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardenese.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardenese.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardenese.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardenese.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardenese.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardenese.zbnhhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardenese.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardoeese.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardoeese.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardoeese.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardoeese.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardoeese.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardoeese.jrcngw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardoeese.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardoeese.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardoeese.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardoeese.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardoeese.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardoeese.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardoeese.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardoeese.qmjjkr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardoeese.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardoeese.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200035999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardoeese.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardoeese.vgeijc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardoeese.vrdnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardoeese.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardoeese.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardoeese.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardonese.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardonese.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardonese.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardonese.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardonese.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardonese.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardonese.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardonese.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardonese.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardonese.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardonese.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardonese.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardonese.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardonese.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardonese.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardonese.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardonese.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardonese.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardonese.vgeijc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardonese.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardonese.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardonese.zbnhhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.jrcngw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicocn-co-jp.aesardsnese.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aaaocosen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoecn-co-jp.aeaocosen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoen-co-jp.aesoonse.alcuth.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoen-co-jp.aesoonse.bbjaoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoen-co-jp.aesoonse.byurlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoen-co-jp.aesoonse.cdkcfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoen-co-jp.aesoonse.dpzuhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoen-co-jp.aesoonse.febcbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoen-co-jp.aesoonse.hafygf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoen-co-jp.aesoonse.kexpaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoen-co-jp.aesoonse.krumxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoen-co-jp.aesoonse.nscsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoen-co-jp.aesoonse.nxjsgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoen-co-jp.aesoonse.pmineb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoen-co-jp.aesoonse.rcwtyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoen-co-jp.aesoonse.rfpuac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoen-co-jp.aesoonse.rmzndb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoen-co-jp.aesoonse.rpgjkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoen-co-jp.aesoonse.sxpzjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoen-co-jp.aesoonse.tyjlpa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoen-co-jp.aesoonse.xsnhjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaoonesen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aasaooseen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaoonesen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiconcn-co-jp.aesaooseen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aasoose.aeqmrz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aasoose.azrbwq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aasoose.bkosbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aasoose.bvuhlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aasoose.byurlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aasoose.dmkqui.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aasoose.fczquz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aasoose.febcbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aasoose.jkonat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aasoose.krumxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aasoose.orxkxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aasoose.rpgjkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aasoose.shenem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aasoose.urbhth.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aasoose.zqtwoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aesoose.aeqmrz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aesoose.blzdnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aesoose.bvuhlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aesoose.cdkcfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aesoose.darlqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aesoose.dmkqui.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aesoose.fczquz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aesoose.febcbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aesoose.gkzemp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aesoose.hafygf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aesoose.krumxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aesoose.onjoto.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aesoose.sxpzjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aesoose.tnhwua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aesoose.tyjlpa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aesoose.xkmdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicoon-co-jp.aesoose.xsnhjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.2uz8yl.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200036583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.3997884.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200036584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.6j449d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200036585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.7wqxmz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200036586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.aalme.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200036587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.ajkqym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.bokqmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.botom1.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200036590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.cjsuye.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200036591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.cyqggi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.dkvvuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.eaoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.fph186.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200036595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.gxemzv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.hlsmyl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.jrignr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.k43e5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200036599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.lgn09m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200036600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.lurojy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.ohmatb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.opyxhy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.orhznj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.pctmqj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.qogdsq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.realme.cool"; content:"Host"; http_header; classtype:attempted-recon; sid:200036607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.sblr001.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200036608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.sblr007.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200036609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.sl86as.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200036610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.udhdcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.vr0rx.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200036612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsacseoe.sascsecoaias.xgyaef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacaordnsee.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacaordnsee.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacaordnsee.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacaordnsee.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacaordnsee.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacaordnsee.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacaordnsee.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacaordnsee.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacaordnsee.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacaordnsee.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacaordnsee.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacaordnsee.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacaordnsee.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacaordnsee.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacaordnsee.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacaordnsee.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacaordnsee.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacaordnsee.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacaordnsee.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacaordnsee.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacaordnsee.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacaordnsee.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacaordnsee.vrdnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacaordnsee.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacaordnsee.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.jrcngw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.vrdnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aacardnseen.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accaordesee.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accaordesee.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accaordesee.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accaordesee.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accaordesee.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accaordesee.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accaordesee.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accaordesee.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accaordesee.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accaordesee.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accaordesee.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accaordesee.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accaordesee.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accaordesee.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accaordesee.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accaordesee.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accaordesee.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accaordesee.vgeijc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accaordesee.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accaordesee.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accaordesee.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accaordesee.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accaordesee.zbnhhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accaordesee.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accardeseen.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accardeseen.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accardeseen.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accardeseen.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accardeseen.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accardeseen.jrcngw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accardeseen.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accardeseen.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accardeseen.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accardeseen.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accardeseen.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accardeseen.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accardeseen.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accardeseen.qmjjkr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accardeseen.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accardeseen.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accardeseen.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accardeseen.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accardeseen.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accardeseen.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accardeseen.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accardeseen.zbnhhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.accardeseen.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.jrcngw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.qmjjkr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordesee.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.jrcngw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.qmjjkr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.vrdnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecaordnsee.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardeseen.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardeseen.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardeseen.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardeseen.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardeseen.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardeseen.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardeseen.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardeseen.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardeseen.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardeseen.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardeseen.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardeseen.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardeseen.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardeseen.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardeseen.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardeseen.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardeseen.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardeseen.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardeseen.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardeseen.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardeseen.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardeseen.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardeseen.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardeseen.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.jrcngw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicscn-co-jp.aecardnseen.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aaaccnsen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsecn-co-jp.aeaccnsen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200036999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aaoacnseen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicsncn-co-jp.aeoacnseen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicson-co-jp.aaocnse.bbjaoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicson-co-jp.aaocnse.bkosbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicson-co-jp.aaocnse.blzdnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicson-co-jp.aaocnse.dkhbub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicson-co-jp.aaocnse.febcbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicson-co-jp.aaocnse.rcmrcm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicson-co-jp.aaocnse.tnhwua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicson-co-jp.aaocnse.tyjlpa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicson-co-jp.aaocnse.wclddi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicson-co-jp.aaocnse.zqtwoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicson-co-jp.aeocnse.aeqmrz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicson-co-jp.aeocnse.alcuth.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicson-co-jp.aeocnse.bbjaoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicson-co-jp.aeocnse.bkosbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicson-co-jp.aeocnse.dkhbub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicson-co-jp.aeocnse.dmkqui.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicson-co-jp.aeocnse.dpzuhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicson-co-jp.aeocnse.ebczvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicson-co-jp.aeocnse.fczquz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicson-co-jp.aeocnse.hafygf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicson-co-jp.aeocnse.krumxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicson-co-jp.aeocnse.pmineb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicson-co-jp.aeocnse.rcmrcm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicson-co-jp.aeocnse.urbhth.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saicson-co-jp.aeocnse.wclddi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.2uz8yl.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200037137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.3667884.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200037138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.4-4-j-tyu-uyt.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200037139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.aalme.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200037140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.cdfsiejkf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200037141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.cxusvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.gulbul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.gxemzv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.gyzt802.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200037145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.hlsmyl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.ia4myc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200037147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.ioyatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.k43e5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200037149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.lgn09m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200037150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.lmhau8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200037151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.lnuxfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.lurojy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.mbruzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.metabrain.group"; content:"Host"; http_header; classtype:attempted-recon; sid:200037155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.piicje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.sblr009.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200037157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.sl86as.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200037158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.tmwhe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200037159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.txbrht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.ukqtgw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.verse6.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200037162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.voezvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.xgyaef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiecascsceoe.sasacseocraias.zxj4025.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200037165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saika69sex.monster"; content:"Host"; http_header; classtype:attempted-recon; sid:200037166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saintpaulcatering.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200037167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.2fx3p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200037168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.5xvtv1.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200037169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.aalme.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200037170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.axcgpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.bokqmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.cyqggi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.dzerdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.ekqclm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.fhalul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.fph186.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200037177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.gxemzv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.gzj7009.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200037179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.hcoklg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.j68gux.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200037181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.k43e5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200037182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.khbsvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.klvjnr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.lnuxfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.lurojy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.mivflz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.ozmubm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.prthkn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.sblr009.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200037190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.sgrxpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.sl86as.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200037192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.ykjclz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.zlsrwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiscasoe.sacsceoias.zxj4025.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200037195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisecn-co-jp.aesense.aeqmrz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisecn-co-jp.aesense.bkosbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisecn-co-jp.aesense.bvuhlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisecn-co-jp.aesense.cdkcfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisecn-co-jp.aesense.fczquz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisecn-co-jp.aesense.hafygf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisecn-co-jp.aesense.ibzlwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisecn-co-jp.aesense.iusmdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisecn-co-jp.aesense.mjbfjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisecn-co-jp.aesense.orxkxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisecn-co-jp.aesense.sxpzjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisecn-co-jp.aesense.tnhwua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisecn-co-jp.aesense.tyjlpa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseecn-co-jp.aeaecnsen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aescnse.aeqmrz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aescnse.blzdnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aescnse.byurlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aescnse.cdkcfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aescnse.dpzuhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aescnse.ebczvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aescnse.febcbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aescnse.ibzlwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aescnse.kexpaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aescnse.nscsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aescnse.onjoto.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aescnse.orxkxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aescnse.pmineb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aescnse.sxpzjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aescnse.tnhwua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aescnse.urbhth.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aescnse.wclddi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aescnse.xsnhjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aesense.cdkcfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aesense.dpzuhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aesense.hxesyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aesense.kexpaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aesense.mgfvys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aesense.mjbfjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aesense.pmineb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aesense.rcmrcm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aesense.shenem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aesense.ttdwdq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aesense.wjxjkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseen-co-jp.aesense.xkmdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesacnseen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisencn-co-jp.aesaenseen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisenkasa.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200037483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacaordncoe.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aacardnscon.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accaordecoe.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.accardescon.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordecoe.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200037999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecaordncoe.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardesco.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardescon.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseoan-co-jp.aecardnscon.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnse.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnse.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnse.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnse.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnse.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnse.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnse.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnse.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnse.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnse.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnse.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnse.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnse.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnse.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnse.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnse.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnse.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnse.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnse.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnse.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnse.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnse.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnse.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnse.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnse.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnsee.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnsee.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnsee.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnsee.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnsee.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnsee.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnsee.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnsee.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnsee.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnsee.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnsee.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnsee.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnsee.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnsee.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnsee.qmjjkr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnsee.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnsee.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnsee.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnsee.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnsee.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnsee.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacaordnsee.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aacardnseen.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aasardnse.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aasardnse.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aasardnse.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aasardnse.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aasardnse.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aasardnse.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aasardnse.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aasardnse.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aasardnse.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aasardnse.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aasardnse.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aasardnse.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aasardnse.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aasardnse.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aasardnse.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aasardnse.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aasardnse.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aasardnse.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aasardnse.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aasardnse.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aasardnse.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aasardnse.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aasardnse.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aasardnse.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aasardnse.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordese.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.jrcngw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.qmjjkr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.vgeijc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.zbnhhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accaordesee.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardeseen.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardeseen.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardeseen.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardeseen.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardeseen.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardeseen.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardeseen.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardeseen.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardeseen.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardeseen.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardeseen.qmjjkr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardeseen.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardeseen.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardeseen.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardeseen.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardeseen.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardeseen.vrdnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardeseen.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardeseen.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardeseen.zbnhhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardeseen.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.accardesen.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordes.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsaordese.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardese.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.acsardesee.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordese.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.vgeijc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.vrdnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordesee.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200038999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnse.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.qmjjkr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.vgeijc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.zbnhhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecaordnsee.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardeseen.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardesen.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aecardnsen.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordes.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordese.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordns.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesaordnse.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardese.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardesee.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnse.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saiseocn-co-jp.aesardnsee.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisesn-co-jp.aescnse.alcuth.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisesn-co-jp.aescnse.bbjaoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisesn-co-jp.aescnse.bvuhlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisesn-co-jp.aescnse.dkhbub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisesn-co-jp.aescnse.dmkqui.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisesn-co-jp.aescnse.fczquz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisesn-co-jp.aescnse.gkzemp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisesn-co-jp.aescnse.onjoto.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisesn-co-jp.aescnse.rmzndb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisesn-co-jp.aescnse.shenem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisesn-co-jp.aescnse.sxpzjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisesn-co-jp.aescnse.tnhwua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisesn-co-jp.aescnse.ttdwdq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisesn-co-jp.aescnse.xkmdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisesn-co-jp.aescnse.zqtwoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisocn-co-jp.aeseonse.cdkcfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisocn-co-jp.aeseonse.dkhbub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisocn-co-jp.aeseonse.hxesyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisocn-co-jp.aeseonse.jkonat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisocn-co-jp.aeseonse.nscsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisocn-co-jp.aeseonse.orxkxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisocn-co-jp.aeseonse.uaatqg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoean-co-jp.aescconse.alcuth.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoean-co-jp.aescconse.byurlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoean-co-jp.aescconse.cdkcfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoean-co-jp.aescconse.darlqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoean-co-jp.aescconse.ebczvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoean-co-jp.aescconse.fczquz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoean-co-jp.aescconse.hafygf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoean-co-jp.aescconse.onjoto.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoean-co-jp.aescconse.rcmrcm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoean-co-jp.aescconse.rmzndb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoean-co-jp.aescconse.sxpzjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoean-co-jp.aescconse.ttdwdq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoean-co-jp.aescconse.tyjlpa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoean-co-jp.aescconse.wclddi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoean-co-jp.aescconse.xkmdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoean-co-jp.aescconse.xsnhjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoean-co-jp.aescconse.zqtwoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaccosen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoecn-co-jp.aeaecosen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesconse.bvuhlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesconse.byurlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesconse.dkhbub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesconse.febcbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesconse.gkzemp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesconse.krumxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesconse.pmineb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesconse.rcwtyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesconse.rmzndb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesconse.rpgjkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesconse.ttdwdq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesconse.tyjlpa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesconse.uaatqg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesconse.urbhth.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesconse.wclddi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesconse.xkmdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesesnse.bvuhlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesesnse.byurlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesesnse.dkhbub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesesnse.dmkqui.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesesnse.hxesyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesesnse.iusmdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesesnse.jkonat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesesnse.kexpaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesesnse.krumxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesesnse.pmineb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesesnse.rcmrcm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesesnse.rmzndb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesesnse.sxpzjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesesnse.tyjlpa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesesnse.urbhth.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesesnse.xkmdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoen-co-jp.aesesnse.xsnhjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacenesen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200039999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaconesen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesacoseen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeonesen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaeoseen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoncn-co-jp.aesaesnesen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocoe.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacaordocose.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoncoen.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aacardoscon.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasaordocos.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aasardoncoe.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200040999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocoe.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accaordocose.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoecoen.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.accardoscon.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsaordocos.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.acsardoecoe.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordecose.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocoe.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordocose.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecaordscose.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200041999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardencoen.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoecoen.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoncoen.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardoscon.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aecardsncoen.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordecos.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordoco.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordocos.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesaordscos.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardencoe.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoecoe.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200042999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardoncoe.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisooan-co-jp.aesardsncoe.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacaordose.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardoseen.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardoseen.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardoseen.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardoseen.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardoseen.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardoseen.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardoseen.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardoseen.jrcngw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardoseen.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardoseen.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardoseen.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardoseen.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardoseen.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardoseen.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardoseen.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardoseen.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardoseen.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardoseen.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardoseen.vgeijc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardoseen.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardoseen.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardoseen.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardoseen.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aacardosen.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.vrdnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordones.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordos.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasaordose.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardose.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aasardosee.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accaordose.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardoseen.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardoseen.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardoseen.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardoseen.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardoseen.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardoseen.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardoseen.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardoseen.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardoseen.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardoseen.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardoseen.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardoseen.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardoseen.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardoseen.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardoseen.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardoseen.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardoseen.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardoseen.qmjjkr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardoseen.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardoseen.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardoseen.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardoseen.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardoseen.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.accardosen.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordoees.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordoees.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordoees.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordoees.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordoees.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordoees.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordoees.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordoees.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordoees.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordoees.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordoees.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordoees.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordoees.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordoees.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordoees.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordoees.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordoees.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordoees.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordoees.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordoees.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordoees.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordoees.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordoees.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordoees.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordos.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsaordose.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardose.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.acsardosee.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecaordose.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardoseen.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardoseen.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardoseen.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardoseen.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardoseen.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardoseen.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardoseen.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardoseen.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardoseen.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardoseen.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardoseen.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardoseen.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardoseen.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardoseen.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardoseen.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardoseen.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardoseen.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardoseen.vrdnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardoseen.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardoseen.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardoseen.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aecardosen.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.jrcngw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.vrdnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordenes.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.tbkema.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.vgeijc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.vrdnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordoees.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200043999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordos.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordose.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.axevxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.jrcngw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.qslple.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.vgeijc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesaordsnes.zbnhhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardose.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoocn-co-jp.aesardosee.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoon-co-jp.aescose.bkosbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoon-co-jp.aescose.bvuhlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoon-co-jp.aescose.ebczvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoon-co-jp.aescose.gkzemp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoon-co-jp.aescose.ibzlwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoon-co-jp.aescose.mjbfjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoon-co-jp.aescose.rcmrcm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoon-co-jp.aescose.rcwtyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoon-co-jp.aescose.sxpzjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoon-co-jp.aescose.ttdwdq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoon-co-jp.aescose.uaatqg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoon-co-jp.aescose.urbhth.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoon-co-jp.aescose.wclddi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoon-co-jp.aescose.xsnhjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoon-co-jp.aeseose.fczquz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoon-co-jp.aeseose.iusmdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoon-co-jp.aeseose.mjbfjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoon-co-jp.aeseose.rcwtyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoon-co-jp.aeseose.rfpuac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoon-co-jp.aeseose.shenem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoon-co-jp.aeseose.sxpzjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoon-co-jp.aeseose.tnhwua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoon-co-jp.aeseose.tyjlpa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoon-co-jp.aeseose.uaatqg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisoon-co-jp.aeseose.xkmdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosan-co-jp.aesccense.azrbwq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosan-co-jp.aesccense.bbjaoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosan-co-jp.aesccense.bkosbt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosan-co-jp.aesccense.cdkcfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosan-co-jp.aesccense.dpzuhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosan-co-jp.aesccense.fczquz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosan-co-jp.aesccense.febcbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosan-co-jp.aesccense.iusmdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosan-co-jp.aesccense.onjoto.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosan-co-jp.aesccense.wclddi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosan-co-jp.aesccense.wjxjkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosan-co-jp.aesccense.xsnhjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosn-co-jp.aescense.aeqmrz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosn-co-jp.aescense.bbjaoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosn-co-jp.aescense.bvuhlb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosn-co-jp.aescense.byurlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosn-co-jp.aescense.dpzuhj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosn-co-jp.aescense.fczquz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosn-co-jp.aescense.gkzemp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosn-co-jp.aescense.hafygf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosn-co-jp.aescense.hxesyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosn-co-jp.aescense.iusmdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosn-co-jp.aescense.orxkxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosn-co-jp.aescense.rfpuac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosn-co-jp.aescense.rmzndb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosn-co-jp.aescense.ttdwdq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosn-co-jp.aescense.tyjlpa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosn-co-jp.aescense.wclddi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisosn-co-jp.aescense.xsnhjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.bezuxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissecn-co-jp.aeaccnsen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.adrcpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.akxoke.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.allonb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.apwzlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.aqieuf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.aqxblx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.awdzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.bavdof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.bqagiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.bqrozl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.bteypq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.cdbrnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.cdfjpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.cdtkhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.ceexby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.ceictb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.cmhsrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.cnfiyj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.debhfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.djhvml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.dnajbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.drnshy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.drwdhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.duqqle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.dypbaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.dzyfvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.edxxbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.euhgpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.eztzvo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.fegpdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.fezmep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.fjjzii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.fkhicf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.flwmue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.fozont.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.fpseeq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.gdtiho.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.gjyxni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.gocgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.gxdhmw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.hmnkzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.hmnwmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.hnylnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.hscqht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.immbtm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.iptkvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.jbtwvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.jhirxe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.jinrzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.jnyzwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.jqhgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.jqxqrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.jskuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.jsmswt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.jxdzbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.jxvonm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.jzdoby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.kcxobq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.kknwsn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.lnachp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.lneevc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.lqkjff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.mtlzof.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.mvaqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.nfavgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.nflxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.nivbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.oxmspn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.pfpbdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.pinnnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.pykhyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.qfagyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.qgnyxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.rjmheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.rmxhij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.rvafwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.seyynv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.sfhczj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.smsoed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.sovjfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.szqtlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.tfcvni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.tmeooz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.tylqln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.udwghj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.uenzhl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.ukjhet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.uqiunq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.uzapox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.vkaugr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.wfjxor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.xbsvsb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.xjrpek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.ybzcxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.yxqkqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.zazzqt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.zhuofc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.zjznry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissncn-co-jp.aeoacnseen.zxdoxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacaordncoe.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aacardnscon.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accaordecoe.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.accardescon.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordecoe.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200044999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecaordncoe.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.qavcpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.wgawhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardescon.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.apeskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.arnfew.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.arwovp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.avwomg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.axqtri.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.btvepx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.cihvln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.covbge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.cwrskp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.dcrsvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.diyuoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.dpslhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.dyinch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.ellksw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.feeqbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.ffbuft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.fsbdct.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.fxxjet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.fyfhli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.gicezn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.glqgtk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.gvgouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.hqajww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.hxdflg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.inrjnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.iqrbjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.iuatzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.jbuiwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.jmbyfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.juvfpl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.kdgnkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.kgzqax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.knlhep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.kvztbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.lglglz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.lwfmbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.mckodi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.nayjgy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.ngebxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.noueab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.nowenj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.nqnlne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.ogjaik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.oprjlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.pexipx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.phvlat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.poeveh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.pohaml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.pxnorl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.pysspz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.qgcumd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.qkvrjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.qtqobe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.rddivb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.rfqmit.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.rixsax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.rxquwv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.smtvls.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.snkito.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.tfrvvm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.tftcps.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.thqyyx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.tkjquc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.tlonzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.txfogv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.usxgqx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.uxoann.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.uyhdkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.vbccvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.viwdvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.vmjtas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.vmmirl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.vpeizg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.vxmaao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.vzvnvp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.wkqssz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.wmqicx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.wzkwwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.xgutwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.xpplid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.yagxom.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.ykvsxc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.ypzcux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.yqksfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.zbavcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.zbpeld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.zctvaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.zkjjaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.zqdtjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.zsubgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.ztwszy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.zyjoeg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.zziusa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissoan-co-jp.aecardnscon.zzreqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacaordnse.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.btjkot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.ffuvdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.kpiksp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.merecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.upurzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.vgeijc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.wdhqcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.xuxidi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnseen.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aacardnsen.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordns.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasaordnse.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnse.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aasardnsee.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.accardeseen.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.accardeseen.eypxtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.accardeseen.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.accardeseen.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.accardeseen.iobzqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.accardeseen.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.accardeseen.klicul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.accardeseen.kyulkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.accardeseen.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.accardeseen.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.accardeseen.pyeepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.accardeseen.qefdpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.accardeseen.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.accardeseen.qfraue.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.accardeseen.rnyheq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.accardeseen.tfqcmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.accardeseen.vrdnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.accardeseen.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.accardeseen.zbnhhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.accardeseen.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsaordese.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.acsardesee.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordese.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecaordnse.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.bdxpym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.btfgyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.cmbwfs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.eetwed.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.gabdjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.gcnmak.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.hlyqfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.ifvvmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.jrcngw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.jsuoih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.kgclvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.ntagjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.oghjyn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.ouldvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.oyjeia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.peknwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.qeqruz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.uqoynh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.utumwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.uxwxza.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.vgeijc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.vrhmmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.vxjinl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.wkjfsl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.yaurkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.ysghzt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.zbnhhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardeseen.zensvi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardesen.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aecardnsen.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordes.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200045999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordese.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordns.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesaordnse.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardese.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardesee.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.ahdtay.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.bekhzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.bnjore.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.boozat.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.cbhzor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.ccfvtd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.cknybm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.cxmafo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.cyrnlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.euxocw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.evdvgr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.ewcwkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.ezvfdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.ffvcwa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.fnumrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.fsgssi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.fshbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.gswzeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.hbotnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.ixjysv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.jbnhig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.jjmfuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.lbwctp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.lgydkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.ljtcwo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.lntxul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.meqloe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.mwyoxq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.npzoht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.pacjkq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.pdcpab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.qdrvgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.qlvtsv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.qwikbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.qwzkpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.rvmfek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.scdphi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.sckxrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.sjikwd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.snhmvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.vfxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.vitwov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.wjqagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.wsxmfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.xiozhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.xugqhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.yjfvhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.yywqhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.zfebdt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saissocn-co-jp.aesardnse.zycmnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisson-co-jp.aeocnse.bbjaoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisson-co-jp.aeocnse.ebczvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisson-co-jp.aeocnse.ibzlwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisson-co-jp.aeocnse.krumxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisson-co-jp.aeocnse.sxpzjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisson-co-jp.aeocnse.tyjlpa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisson-co-jp.aeocnse.xsnhjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saisson-co-jp.aeocnse.zqtwoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saitadobrasil.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200046284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"salamalands.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saldaomagalu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"salesinvoice-app-zz62l.ondigitalocean.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200046287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saliksnas.lojaintegrada.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200046288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"salmanfarsi01.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200046289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"samada.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200046290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"samakalinsangbad.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sametcarpet.com.tr"; content:"Host"; http_header; classtype:attempted-recon; sid:200046292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sametecpedidosonnline.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"samilitaria.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sammarone.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200046295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"samrockchem.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"san-dbox-home-lojaprincipessa.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sanatcimenajeri.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200046298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sandalychacosklep.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sandeeppk03.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200046300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sandersonphotosonline.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sandysblog.biz"; content:"Host"; http_header; classtype:attempted-recon; sid:200046302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sanjilkumar.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sankeshsurana.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sankovichy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sankyo-m.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200046306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"santa-air.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"santa565sac.ultimatefreehost.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200046308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"santadocs-webauths-document-jtzq7.ondigitalocean.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200046309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"santander.santanderrio12.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200046310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"santasanta.temp.swtest.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200046311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sape37.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sape5.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saporidicucina.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200046314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sar-bcb7cc.ingress-bonde.ewp.live.weddingplanneradrian.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200046315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sarasotaanimalhospital.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sardonicwelloffgenericsoftware.alljack.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200046317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sardunyacicekcilik.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.bifjvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.bmfobi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.cqwnqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.cwjzww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.eefurs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.ehekrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.euxofr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.fxirgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.gtplhd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.hzehzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.ikkkdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.imfgws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.kcjtvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.klvynj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.lpqwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.nhnuoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.otpyob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.ptrkur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.pxgjez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.pynwaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.pywjsj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.qaeftk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.rkiglj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.ruwymh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.taegng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.tmerzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.wdxrob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.wpkbmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.yjbkym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.zqnwko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscacsaacn.zyiily.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.brjqsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.brzmre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.bxmcgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.ddijxb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.dsaxki.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.iaqtkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.jnkzrk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.jteuyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.kfjzvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.klqtzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.kqdudy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.llhtbi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.ntjsqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.oexjql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.pyaedh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.pzaujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.rriiyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.thxfkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.udmgoo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.vdfsrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.vrsjxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.wbmmyr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.wdvbgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.whugav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.wssuzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.wvineh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.xeibve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.xjuqbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.xyzvie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.ynuzip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscancsaascnn.zjywhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.bgxmym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.bjuflz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.bnvgmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.cjjnnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.crvjko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.dcrnul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.difoqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.ennlzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.eujone.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.filulm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.froqpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.hlkhkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.ibazga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.iczrpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.ihkuhk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.ijvszo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.jhcowo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.khanmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.mcwort.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.msltuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.oowjsh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.potbel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.rrfysn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.tlokjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.tuzxao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.tvrjrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.ulzxkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.umneli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.uzybsw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.vrhhjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.ymuffl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.ynrggf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiscscaan.zopxwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.aflbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.atksnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.cplnnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.ddbshs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.dmomwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.gzwlap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.hfibhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.hxhovm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.idzmgi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.iyaxwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.izhfml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.kfohhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.kizugj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.nncntf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.pzzlrr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.rhbecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.rixlhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.sficyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.sgtgzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.smitfz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.uhameo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.uxubso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.vkaozv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.vvbzuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.wkyxva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.xbkiuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.xujfxi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.xzjciy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.ycvzbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacn.zadadc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.bifjvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.bmfobi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.cqwnqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.czwota.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.eefurs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.ejfisj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.euxofr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.gtplhd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.hstuuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.hzehzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.ikkkdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.imfgws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.iqgaah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.jrnmkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.kcjtvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.lpqwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.msqzhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.nhnuoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.oigmja.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.ptrkur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.pxgjez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.qaeftk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.rkiglj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.ruwymh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.vymalq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.wdxrob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.wlkehb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.wpkbmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.xzngwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.yircqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.yjbkym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.zqnwko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseacsnace.zyiily.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.cplnnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.ddbshs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.eqcegi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.fhvsxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.fiwzfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.hfibhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.idzmgi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.iyaxwj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.izhfml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.joocem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.jppraz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.kfohhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.kxdfiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.mkcvda.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.nncntf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.nqkmwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.pzzlrr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.rauufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.rhbecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.rixlhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.sficyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.smitfz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.tihcxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.uhameo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.uxubso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.vkaozv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.wkyxva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.wqugjg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.xbkiuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.xjslya.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.xujfxi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.xzjciy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseaen.zadadc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseancsnascen.brjqsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseancsnascen.bxmcgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseancsnascen.ddijxb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseancsnascen.dsaxki.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseancsnascen.gokblw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseancsnascen.hbsstk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseancsnascen.jnkzrk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseancsnascen.jteuyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseancsnascen.kfjzvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseancsnascen.klqtzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseancsnascen.llhtbi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseancsnascen.ntjsqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseancsnascen.oprtxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseancsnascen.pzaujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseancsnascen.tbdqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseancsnascen.thxfkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseancsnascen.tluygv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseancsnascen.vfqbjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseancsnascen.vrsjxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseancsnascen.wssuzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseancsnascen.xjuqbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseancsnascen.xyzvie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseancsnascen.ydzfzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseancsnascen.ynuzip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseancsnascen.zjywhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.bjuflz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.bnvgmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.cjjnnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.crvjko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.dfkfpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.difoqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.dnugkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.ennlzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.eujone.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.filulm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.fowknz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.ftagmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.hlkhkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.iczrpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.ihkuhk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.ijvszo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.khanmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.mcwort.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.msltuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.nuvgfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.oowjsh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.plldej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.rrfysn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.spzyuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.tlokjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.tuzxao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.tvrjrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.ulzxkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.umneli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.uzybsw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.vrhhjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.xpccuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.xqildh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.ymuffl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.ynrggf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.zopxwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseecnae.zouwot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.aflbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.cplnnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.ddbshs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.dmomwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.eqcegi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.fiwzfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.gzwlap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.hfibhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.hxhovm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.idzmgi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.izhfml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.joocem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.kfohhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.kizugj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.mjtgxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.nncntf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.nqkmwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.pzzlrr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.rauufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.sgtgzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.smitfz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.tihcxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.uhameo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.uxubso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.vkaozv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.vvbzuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.wkyxva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.wrvclc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.xbkiuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.xbpqdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.xujfxi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.xzjciy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.ycvzbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseocn.zadadc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.aflbbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.atksnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.ddbshs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.eqcegi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.fhvsxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.fiwzfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.gzwlap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.hfibhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.idzmgi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.izhfml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.joocem.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.jppraz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.kfohhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.mjtgxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.mkcvda.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.rauufd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.rhbecw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.rixlhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.sficyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.sgtgzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.smitfz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.tihcxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.uhameo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.vvbzuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.wkyxva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.wrvclc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.xbkiuv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.xujfxi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.ycvzbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasiseoen.zadadc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.bifjvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.cqwnqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.cwjzww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.czwota.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.eefurs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.ehekrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.ejfisj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.euxofr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.fxirgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.hzehzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.ikkkdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.imfgws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.iqgaah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.jrnmkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.klvynj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.lpqwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.msqzhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.nhnuoj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.oigmja.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.otpyob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.pynwaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.pywjsj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.sdgzim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.tmerzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.tvkxwn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.vymalq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.wdxrob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.wlkehb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.yircqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesccsnace.zqnwko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.bgxmym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.bjuflz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.cjjnnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.crvjko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.difoqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.dnugkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.ennlzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.eujone.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.froqpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.hlkhkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.ibazga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.iczrpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.ihkuhk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.ijvszo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.kcjedy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.khanmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.mcwort.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.msltuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.nuvgfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.oowjsh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.plldej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.potbel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.rrfysn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.skhmmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.tlokjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.tuzxao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.tvrjrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.ulzxkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.uzybsw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.vrhhjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.xpccuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.ymuffl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.ynrggf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.zopxwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisescnae.zouwot.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.brzmre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.bxmcgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.ddijxb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.dqnrrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.dsaxki.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.gnhbje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.gokblw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.gsbskv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.kfjzvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.klqtzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.kqdudy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.llhtbi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.oexjql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.oprtxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.pyaedh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.pzaujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.rdgbdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.tbdqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.vdfsrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.vfqbjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.vrsjxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.wdvbgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.whugav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.xjuqbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.xyzvie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.ynuzip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisesnccsnsacn.zjywhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.cqwnqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.cwjzww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.ehekrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.ejfisj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.euxofr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.fxirgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.gtplhd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.hstuuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.ikkkdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.imfgws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.iqgaah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.jrnmkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.klvynj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.lpqwcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.msqzhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.oigmja.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.otpyob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.ptrkur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.pxgjez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.pynwaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.pywjsj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.qaeftk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.ruwymh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.sdgzim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.tmerzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.vymalq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.wlkehb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.xdloga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.yircqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscace.yjbkym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.bifjvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.cqwnqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.cwjzww.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.czwota.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.euxofr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.fxirgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.hzehzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.ikkkdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.iqgaah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.kcjtvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.oigmja.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.otpyob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.pgoicb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.ptrkur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.pxgjez.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.pynwaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.pywjsj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.qaeftk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.tmerzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.tvkxwn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.wdxrob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.wlkehb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.wpkbmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.xdloga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.xzngwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.zqnwko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissacscacn.zyiily.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.brjqsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.brzmre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.bxmcgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.dqnrrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.dsaxki.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.gsbskv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.hbsstk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.iaqtkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.jnkzrk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.jteuyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.kfjzvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.klqtzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.kqdudy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.llhtbi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.npljci.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.oexjql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.pzaujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.rriiyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.sdkpfi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.thxfkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.tluygv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.udmgoo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.vdfsrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.vdwqkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.vfqbjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.wbmmyr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.wdvbgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.whugav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.xeibve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.xjuqbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.ydzfzi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.ynuzip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascen.ypqcrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.brzmre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.bxmcgt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.ddijxb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.dqnrrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.dsaxki.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.gokblw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.gsbskv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.hbsstk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.iaqtkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.kfjzvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.kqdudy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.llhtbi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.npljci.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.ntjsqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.oexjql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.oprtxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.pzaujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.rriiyt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.sdkpfi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.tbdqmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.tluygv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.udmgoo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.vdfsrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.vdwqkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.vrsjxk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.vvfcqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.wdvbgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.whugav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.wssuzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.xeibve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.xyzvie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.ynuzip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasissancscascnn.zjywhn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.crvjko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.dcrnul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.dfkfpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.dnugkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.ennlzr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.filulm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.fowknz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.froqpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.ftagmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.hhaqos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.hlkhkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.iczrpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.ihkuhk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.ijvszo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.khanmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.nuvgfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.plldej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.pzomzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.rrfysn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.spzyuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.tlokjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.tuzxao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.tvrjrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.ulzxkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.umneli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.xpccuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.ymuffl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccae.zopxwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.bgxmym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.bjuflz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.cjjnnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.crvjko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.difoqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.dnugkv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.eujone.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.filulm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.fowknz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.froqpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.ftagmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.hhaqos.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.hlkhkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.ibazga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.iczrpr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.ijvszo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.iomvdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.jhcowo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.khanmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.mcwort.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.msltuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.nuvgfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.plldej.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.potbel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.pzomzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.rrfysn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.skhmmn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.tlokjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.tvrjrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.ulzxkm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.uzybsw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.vrhhjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.xpccuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.ymuffl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasisssccan.zopxwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"satay-secur.reconfimations.pagedisabled.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200046917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"satoshiisland.from-mint.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200046918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"satriaputra.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"satterfield.qfhv5wsook-ewx3ldk9m6zq.p.temp-site.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200046920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"satukankekuatanyok.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200046921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"savvycraftymom.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sb.empresariallsaude.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200046923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sb9-new6.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200046924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sbancolombiaincio9t6.iceiy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sbc-nation.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200046926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sbcglobal-100357.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200046927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sbcglobal-103286.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sbcglobal-108139.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sbcglobalonlineverificationupdate.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sbcglobalverification120.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sbcglobalverification150.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sbcglobalyahooonlinenerification.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200046933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sbcgloyahoocom.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200046934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sbcxxiv-105767.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200046935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sbcyahupdates.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200046936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sbmptn.bintangpelajar.co.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200046937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sbndjurxjk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200046938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sbs-siebanlagen.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200046939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sbtpdxzdvc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200046940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sbvrzybxjm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200046941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sbyd67-97dfv.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sbyd67-97dfv.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200046943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sc-01111000.ihostfull.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sc-spk.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200046945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sc.apartmentbardolino.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200046946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scanned-dcoument.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scanoffice365-owa4874.microsoft365scan.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200046948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scard.bodyia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scare.heural.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scaryrahhl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200046951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scceure-well05access.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scceure-well05access.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200046953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sceiplc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sceniccable.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"schmeler.qfhv5wsook-ewx3ldk9m6zq.p.temp-site.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200046956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"schmittner.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200046957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"schoenreparatie.nu"; content:"Host"; http_header; classtype:attempted-recon; sid:200046958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"school.greenislandtrust.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200046959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"schutzoficial.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scietegeneralconfirmoviles.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scietegeneralconfirmoviles.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200046962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scietegeneraleconfimobilesty.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scietegeneraleconfimobilesty.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200046964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scintillating-marshmallow-e7493c.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200046965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sclswisscom.flazio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scmonay.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sco1992999.ultimatefreehost.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200046968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scqjhehmly.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200046969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"screeching-celestial-prepared.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200046970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"screen-k.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"screenpaste.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200046972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scriptura-livraria.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scroics-diuf-dours.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scrty.cold-thunder-d531.siteacn.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200046975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scrub.fanid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scubabargins.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scvnrkehgn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200046978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sd-shar3-p01nt.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sd-shar3-p01nt.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200046980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sd2wswqe3r.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200046981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sda-vkl.ba"; content:"Host"; http_header; classtype:attempted-recon; sid:200046982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sdcindia.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200046983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sdfghjmnbgfrthjnbfghbvdfgvcfswwertu.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sdgvsdvsdvs.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sdhdajattmaisyaho.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sdhekaehkn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200046987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sdlugaxufi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200046988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sds-studiolegale.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200046989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sdvixccidfxcuyf.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200046990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sdy.quantiremesp.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200046991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sea-lion-app-3kpgj.ondigitalocean.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200046992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceccsaonrir.soeaacseosniaoeosnmer.elhicw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceccsaonrir.soeaacseosniaoeosnmer.rvpepb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.tgmqlg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.qlmenm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.gyzt809.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200046997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.mxeanv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.nphgoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200046999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.ladyul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.ytwbnq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.gntozh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.wcpjfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.xqpwkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.dkmimw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.gxdhfa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.nhewlh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.dgqqxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.xqpwkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.b6x80w.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200047010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.demtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.dgqqxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.hhxulg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.hixcny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.voadax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.adlxbh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.flscly.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.hhxulg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.rhwdsq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.vrbvro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.yyzded.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.lfvlpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.nphgoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.xwitwq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.dfdnsx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.elhicw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.kbqnmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceseeaccsirocrn.orsaeaciesseaociniaoeosnmer.demtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.fvkhnr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seacieccaserircsooan.seesaacrcoaesniaoeosnmer.qexccc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seacieccaserircsooan.seesaacrcoaesniaoeosnmer.tilzhy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.hpbzkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.ioxsho.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200047033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.ohzctx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaclaim.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaclaim.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.gxdhfa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.vnbbks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seacseccasorirn.osaeacesseocnaoeosnmer.nhewlh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seacseccasorirn.osaeacessoccnaoeosnmer.xzlnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seafooddeliveryapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seal-app-k2wcm.ondigitalocean.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaorchids.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seaquaticaquariums.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"search.luminosoocchio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.1112458.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.bfsngf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.ehgmml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.eucvbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.hycxop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.ilfbdb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.pxnctk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.pysitg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.wcpjfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.xaexmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.xzlnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.zmlyhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.abluwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.adlxbh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.bvdadv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.citcfi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.demtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.dkmimw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.ejvocy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.fhqemq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.fprrlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.fukjzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.fvkhnr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.gxdhfa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.kwoneq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.lfvlpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.nkjfmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.ofldnb.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200047073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.oiknia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.pysitg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.shanchuta27.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200047076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.xaexmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.xgtofb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.6788665.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.bvdadv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.epwnsr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.fprrlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.fvkhnr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.fzfweo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.gyzt809.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.jryuds.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.lgwjlm.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200047087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.n21so.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200047088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.pqdxev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.pxnctk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.qskgtg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.rvpepb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.saveyr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.tikoig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.yhuvzv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.1112458.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.bfsngf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.dfdnsx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.ehgmml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.eucvbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.gdmdxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.glhdpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.ilfbdb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.kbqnmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.ladyul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.nlujo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.rgdpsh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.rjbvwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.tikoig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.zrbfzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.bvdadv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.dfdnsx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.eucvbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.gntozh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.jivdhm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.lfvlpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.mingrunfuzhuang05.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.npibd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.nqsaby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.pugxbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.pxzjwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.pysitg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.zmlyhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.dkmimw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.fhqemq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.hhxulg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.jivdhm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.mxeanv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.xzlnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.yifpgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.yyzded.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.epwnsr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.fhqemq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.fprrlq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.ilfbdb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.nqsaby.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.tgmqlg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.tilzhy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.vnbbks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.wcpjfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.xgjt.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200047141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.yifpgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.yyzded.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.bvdadv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.elhicw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.gntozh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.gxdhfa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.gzmvuo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.hpbzkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.mingrunfuzhuang05.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.neidee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.nphgoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.xwitwq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.yifpgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.yphurc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.zmlyhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.hhxulg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.nhewlh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.pugxbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.pxnctk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.pysitg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.rvpepb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.voadax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.xgjt.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200047164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.ytwbnq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.1112458.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.ejvocy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.gyzt809.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.hixcny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.hweypy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.iytxjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.pbykwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.wcpjfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.xgtofb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.xqpwkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.bvdadv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.cjezmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.dkmimw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.elhicw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.gamxhl.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200047180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.glhdpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.gxdhfa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.hpbzkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.mvqlzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.pbykwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.rvpepb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.xgjt.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200047187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.yhuvzv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.demtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.dgqqxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.dkmimw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.gyzt809.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.jryuds.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.jubsfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.mingrunfuzhuang05.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.rhwdsq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.wl85i.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200047197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.ytnxwi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seayourealsoon.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sebat-dhl.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sebene27.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200047201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seccuesdhaeduwueweiveoenedcushaedduileowueweiveoendudsweyeevse.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secrdsn.selfip.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secserui-mpts.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sectcgoqdo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secur0srvr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secure-2482rkpfl2982.social-cloudjetorg-1.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200047207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secure-2step.dns04.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secure-4698522mp1553te.permanent-dedicated-07.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200047209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secure-alpha-497da0be515757web.gidiagents.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secure-authentication.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secure-dashlane.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secure-device-info.sg-delivery.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secure-macartevitale.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200047214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secure-runescape.xgm.rnp.mybluehost.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200047215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secure-validate-and-verify-business-and-private-emails.d1z0uq42dwskuc.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secure.logins.accounste01.12acccounts47851.5klojistik.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secure.oldschool.com-c.cz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secure.oldschool.com-fr.cz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secure.oldschool.com-o.cz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secure.oldschool.com-rs.cz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secure.oldschool.com-s.cz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secure.oldschool.com-v.cz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secure01citizens1data.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secure1bt.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200047225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secure55.webhostinghub.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secureatt.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securebridge.network"; content:"Host"; http_header; classtype:attempted-recon; sid:200047228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securebtbusi.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200047229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securebusiness.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200047230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securecuserver.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200047231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securedencode.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securedocument-ccrrllc.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securedprotocol.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securedsigningh.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securefacebook.azurewebsites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securefecovbusins.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securefile.jennitai.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secureinstagram.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securelogin.31-42-177-208.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securemyattaccount321.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securemyattmailaccount.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securepgebusnssdashboard.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200047243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securespend.fix8.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200047244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securifywalletsync.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securitepro.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"security-page-community-standards.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securitydashboard.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securityexit.260mb.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securssmannegementacc22.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sedekahchip1-5b.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seedify-staking.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seedify.com.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200047253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seedify.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200047254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seedofy.fund"; content:"Host"; http_header; classtype:attempted-recon; sid:200047255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seehere.trainercentral.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seendify.fund"; content:"Host"; http_header; classtype:attempted-recon; sid:200047257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seevicemail.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sefaunal.com.tr"; content:"Host"; http_header; classtype:attempted-recon; sid:200047259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"segesyapi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"segredoshein.club"; content:"Host"; http_header; classtype:attempted-recon; sid:200047261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seguravirtualbanca.grupo360.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"segure.application.dev-statistik.boyolali.go.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200047263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seguriadadbancodecreditoeinverciones1.reactivarbci.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seguridad-itau.kinahost.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200047265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seguridad.linea0.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seguridadbanc.seguridad66.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seguridadbancar.seguridadbancar.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seguridadbanco--galiciaalert.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seguridadbanco.kinahost.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200047270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seguridadpersonasbancolombia.sucursalwebpe.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seguridadprovincia.postquestions1.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seguro-dados.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seguronacionalcr.ultimatefreehost.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200047274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"segurosernestovillarreal.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"segurosgarpos.com.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sehdfjd.h86uwtyd.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200047277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seingdasbed-orene.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seingdasbed-orene.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"selfishosprey.build067.wpsandbox.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"selfteam4servicezcu.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200047281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sella.largoplacismo.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sellyourhousedmv.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"semanabotaforapix.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"semanadeofertasmagazineluiza.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"semanal-par-os-pais.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"semanario7dias.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"semanatotalblackmae.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seminovosbrazz.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"semwnhtfeg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"senscommunication.mjm.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200047291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sensdapps.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sensdapps.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"senzoku-pass.monkelabs.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200047294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seoservicesiox.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seoservicesiox.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seotop.chaojihunlian.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sepantaeng.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"serch26.biz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"serene-selkie-7b7885.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"serfinanzavirtual-bancoserfinanza.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"serfrtgtgrf.byethost9.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sergiorica.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"serpentinedodgerblueevaluation.bebesi.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sertaocentral.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sertificacionenlinea.c1.biz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sertyxese.myfreesites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"serv5.servs.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server-data-20d8d.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server-data-20d8d.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server-hrmpb1.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200047311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server-hrmpb2.gq"; content:"Host"; http_header; classtype:attempted-recon; sid:200047312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server-jmxhz3.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200047313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server-networksolutions.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server-nrcje5.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200047315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server-sadwb7.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200047316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server-uewit6.gq"; content:"Host"; http_header; classtype:attempted-recon; sid:200047317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server-waajo5.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200047318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server-waajo6.gq"; content:"Host"; http_header; classtype:attempted-recon; sid:200047319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server-xdkhf3.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200047320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server.yahoomaiii.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servercogeco.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"serverff.160whr.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200047323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servertechnicalnoticeimmestae-reconecting.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servic-4096.awuqohsjo9847.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"service-clients-7e37e.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"service-clients-7e37e.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"service-manager.paiza-user-basic.cloud"; content:"Host"; http_header; classtype:attempted-recon; sid:200047328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"service-paiement-netfiix.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"service-rubrique-ameli.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"service-secure3b-chase.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200047331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"serviceadhelpmeta.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"serviceadhelpmeta.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"serviceappsm.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servicecom.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200047335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servicedoc001.onedrive0001.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servicefbhelpmeta.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servicefbhelpmeta.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servicemms.weezbe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servicepage.service-page.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"services-pichin8921.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"services.chambertin-lifestyle.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"services.maxcoinre.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"services.oldschool.com-or.cz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servicesbancaire.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servicesupport-ameli.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200047346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servicioalclientebn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"serviciodecorreo.es-ac.tualizacion.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200047348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servicios--galiciahd.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servicios--galiciahh.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servicios--galiciahl.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servicios.bgaliciaar.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"serviciosbancpichinchacomecu.ecuador0.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servicosmaga.taplink.ws"; content:"Host"; http_header; classtype:attempted-recon; sid:200047354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servicovirtual360.grupo360.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servicpaysea.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servics.validationsecuradm.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servicsuis.temp.swtest.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200047358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servinana.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200047359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"serviplusbogota.com.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servisaludec.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servisi0.134433.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servizio-onlinebper.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"serviziowebportale.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servterm193.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"setdbk.sa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"setuh.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"setupmynorton.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200047368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"setupyouraccounts.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seu-desconto-digital-online.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200047370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seul.unilurio.ac.mz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seumomentoeagora.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200047372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seutrafego.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sevenbannk.co.jp.shbgre.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sf-yirp.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sfaipsozqt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sfbjtdbnhx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sfebjzjymd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sfes.rakitan-bannk.co.jp.cfysu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sfes.ratuken-bannk.co.jp.ocpii.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sffdvefc.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sfirstrepublic.coms.cso.gov.tt"; content:"Host"; http_header; classtype:attempted-recon; sid:200047382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sfjyuechlx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sfr-anti-fraude.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200047384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sfr-clients.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sfr-esim-contact.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200047386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sfr-espace-client.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200047387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sfr-protection.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sfr-support.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200047389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sfr.fr.factures-annulation.ch"; content:"Host"; http_header; classtype:attempted-recon; sid:200047390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sfr.ssl-login.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sfrpanel.lws.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200047392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sfsfsfaqdwegrdwdvbzz.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sfsfsfwfeegegq.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sfsw3.picg4.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sgcdmptdmw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sgfdgdertgf.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sgfmqzi.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200047398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sgieboticario.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200047399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sgieboticario.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sgnaked.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sgnc.org.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200047402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sgsgsgegetetetw.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sgsvabsbbhhhhahbbsmanxbmmbzxbxncuihueussoplkhjhg.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sgtbalde991-dot-still-dynamics-321006.ue.r.appspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sgubtfhsfs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sh.mfuture.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shangshucai.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shanky0.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200047409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"share-file-drive-device-local-disk.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"share-file-drive-device-local-disk.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"share.ebforms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shareaview.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shared-1b6c1.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shared-1b6c1.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shared-cloud-project.reading-voicee.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shared-doc-107266.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200047417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shared-documentupload.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shared-email-files.documents-project.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shared-excel-documents8765.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shared-files.messseg.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shared-folder-private.nhilenhil.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shared-private.files-auuth.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shared-secure-doc-c908.pw5bozbp.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sharedfax815201376.wordpress.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sharedfolder-triueme-0ffice365.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sharedfolder-triueme-0ffice365.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sharedpoint-document.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sharedpointonlineauthentication.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sharefile.universalaolx.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sharefile45123121y50.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sharemailviewer1930.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shareneedz.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sharep0int-ms365-0-drive.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sharep0int-ms365-0-drive.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sharepoint-f0e5f5-8c91-49fc-af1f-cb56b5f54a61.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sharepoint-microsoftonline-live.workingflare4730.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sharepoint.hi-old.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sharjahphdaward.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shark-app-s3wz5.ondigitalocean.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shbibasswap.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200047441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shborrachas.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shein-es-onli.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200047443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shein-us.rewardsandoffer.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sheinblack.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200047445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sheincampaign.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sheindresses.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sheinimporter.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sheinoutlet.vn"; content:"Host"; http_header; classtype:attempted-recon; sid:200047449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sheinpromo.company.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200047450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sheins.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sheinshop.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200047452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sheinvip.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sheout.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200047454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shepemeint-dalavery.builderallwppro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shibaclassic.sc"; content:"Host"; http_header; classtype:attempted-recon; sid:200047456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shibasswaps.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shibaswa.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shibaswaaps.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shibaswap-com-login72.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shibaswap-com-login73.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shibaswap.mypixieset.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shibaswapasd.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shibaswappa.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shibaswapsss.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shibatokenairdrop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shibawap-token-connect.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shibbaswapapp.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shido.market"; content:"Host"; http_header; classtype:attempted-recon; sid:200047469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shikimei.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200047470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shineworld-ind.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shiny-mousse-17797b.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shiny-sound-a24a.rcvrysrvce.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ship.gt"; content:"Host"; http_header; classtype:attempted-recon; sid:200047474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shipment-post-at.apolline-voyance.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shipping.onedrive0001.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shirtronics.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shjrmqipcj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shnerelxxp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shodeea.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shooponliine.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shop-jnpost.39215122111.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shop.aram.coffee"; content:"Host"; http_header; classtype:attempted-recon; sid:200047483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopeeaif.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopeeaih.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopeeca.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopeecb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopeecd.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopeecg.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopeech.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopeecj.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopeecm.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopeecoins.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopeecq.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopeecw.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopeecx.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopeecy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopeeday2022.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopeei.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200047499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopeekf.ltd"; content:"Host"; http_header; classtype:attempted-recon; sid:200047500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopexpressbda.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopinp0st.4561212112154.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopintime.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopmedicinaldrug.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shoppevip4.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopping0lx.5644344421.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopping4life247.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopstyle.alex8118.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopwithbiya.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopypanda.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"short-url.upr.ac.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200047511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"short.mypaste.fun"; content:"Host"; http_header; classtype:attempted-recon; sid:200047512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"short.upm.es"; content:"Host"; http_header; classtype:attempted-recon; sid:200047513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shorturl-ddc.moph.go.th"; content:"Host"; http_header; classtype:attempted-recon; sid:200047514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shorturl.ac"; content:"Host"; http_header; classtype:attempted-recon; sid:200047515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shotech.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200047516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shr-sharedfile-file.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shrill-resonance-baf8.westloanewre.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shrill.nxazenom.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shrillneatchajuev11.jue2344.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shshdjx.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shstp.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shtkslife.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shutterislandsid2.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shutterislandsid4.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shvntzvcsu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shya-pjt9.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shya-pjt9.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shydysw.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"si-tpp.dkp.jatimprov.go.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200047530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"siatamask.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"siayu.indramayukab.go.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200047532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sicherheit.bundesbank-verifikation.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sicherheitscheck-onlineportal-spk.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200047534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sicredixseguraca.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200047535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"siemamexico.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"siempremas-pres.cardrabbit.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sierradorada.com.ar"; content:"Host"; http_header; classtype:attempted-recon; sid:200047538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sifqrobmqc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sigmacirebon.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sign-18j11mw7cmkpjxmfrcjs47u4rge2l657kyrbiq2ve64ku.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sign-1uwcwngkv6addzgek46wx7attvjaromcpeeuhynjt6gne.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sign-3hmttxgquqfl4idw57vwqnufgz6c2fpnbb10i15enspge.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sign-88uil4pl0fpucfx7pph9k69d4zt7op37s8mp6o2pufewq.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sign-flcu.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sign-fut.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sign-fut.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sign-il6izs6n9v8vctpc1ct6n1d83eubvfy58ih4k81olj9e9.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sign-j5im9qho48v2l386wjvt14ixmdc647uh4d35uvu3ndm6u.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sign-n78fym67pmytj2r2qx7j3iim04ag8ziesx7b12roi2zle.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sign-rhux8wadlmlvzyiw59mh1yxa8sb21v9nlufbxt0n.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sign-wft2khywehg11mj3r9enz5zlgmoeby6lpgrnpt4e.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sign-zclwo5qvsr9quu5c5lxvn9x9hg20zqws1u7itosvwuvyo.website.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sign.formiche.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sign.preparing.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"signatlogxx.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"signedlines.wavoto.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"signflcu.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"signiin-att-com.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200047559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"signin-attmail-102289.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200047560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"signinamfc.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"signinatlogi.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"signinattcom109581-101748.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200047563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"signingattconfirma.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"signon-fhorizon.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"signon-fhorizon.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sigulemada.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"siiiba-37b.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"siiiba-37b.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"silahkan-konfirmasi-akun-anda78.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"silent-darkness-b676.t0eajfnk.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"silent-fish-belief.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200047572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"siliconescuritiba.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200047573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"silikalthailand.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"silkyfavorableparser.gabrielpmd.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"silveredgetechnologies.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"simekengineering.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200047577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"simexcbr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"simexcel.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"simgeprek.blitarkota.go.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200047580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"simofi-der.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"simofi-der.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"simpkk.karanganyarkab.go.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200047583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"simple-swap.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200047584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"simplissimot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"simplisticbeautifulunitvie22.vie222.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"simranarts.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sindemail.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sinfocreative.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sing.serish.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sing.theyon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"singletaryandassociates.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sink.velment.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"siporados15585.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sipp.umtas.ac.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200047595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sisale.2022outletsdiscount.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200047596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sisamaks.bandungkab.go.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200047597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sistemaonlinebper.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sistemaverde.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200047599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sistemel.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sisterhoodmint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"site-4403463-3995-6112.mystrikingly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"site9423623.92.webydo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"site9423773.92.webydo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"site9434107.92.webydo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"site9548676.92.webydo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"site9551459.92.webydo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"site9552191.92.webydo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"site9606042.92.webydo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"site9607677.92.webydo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"site9608556.92.webydo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder157799.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder157806.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder158541.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder159641.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder162459.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder166793.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder167178.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder167302.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder168895.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder170829.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder171154.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder171156.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder171681.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder171780.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder172240.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder172519.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder173021.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder173352.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder173799.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder174344.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder174827.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder175112.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder175184.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder175495.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder176184.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder176232.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder176317.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder176428.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder176444.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder176861.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder177623.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder177677.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder177785.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder177855.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder177881.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder177991.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder178250.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder178264.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder178357.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder178367.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder178444.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder178451.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder178536.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder178590.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder178591.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder178754.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder178758.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder178795.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder178983.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder178987.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder179131.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder179144.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder179151.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder179571.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder179728.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder179801.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder180109.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder180202.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder180485.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder180762.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder181219.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder181716.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder182155.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder182302.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder182931.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder182994.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder183517.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder183700.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitebuilder183819.dynadot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitemagalu.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200047681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sites-om.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sites-om.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sites.wistech.biz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitioweeb--glaci.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitioweeb.glaci.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitobpr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sitwebtimgd.fimwetdugrs.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sj.jijifujiji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sjdhh08-gdhfeur8.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sjdhh08-gdhfeur8.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sjhdtlrtkk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sjkdkdshkdkskkkhskhkssdkhkdhk.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sjkdkdshkdkskkkhskhkssdkhkdhk.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sjkhsdjkkj.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sjl7eze8.dreamwp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"skeptimisticleadership.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"skexsqgenk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"skinbasics.pk"; content:"Host"; http_header; classtype:attempted-recon; sid:200047699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"skinbid.biz.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200047700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"skinbid.org.es"; content:"Host"; http_header; classtype:attempted-recon; sid:200047701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sklepkody.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200047702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"skoda.nativeconnect.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200047703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sky-authenticate.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sky-authenticate.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sky247id.life"; content:"Host"; http_header; classtype:attempted-recon; sid:200047706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sl18839399.liveblog365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"slategreygreedyequations.bancolom01.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"slbukszhja.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sleamcommuuntiy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sleamcommynitu.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200047711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sleepmaskz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sleepyllama.build067.wpsandbox.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sliljrdxmt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"slimauto-blhonbkub.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"slkoksjmpb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"slmfrrmzer.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"slmkufeckf.jon-jensen.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"slorg03.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"slowlinebag.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200047720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"slutkissgirls.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"slvwtckhpo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sm777.csb.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smal.lu"; content:"Host"; http_header; classtype:attempted-recon; sid:200047724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"small-bread-5670.wvesadsdfdsfd.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"small-disk-48bc.f57ny24z.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"small-dust-6c63.pontufbksd.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"small-mouse-ee7f.5o2e3xql.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"small-rice-d2df.wadestones.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sman2pariaman.sch.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200047730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smarchbuilders.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200047731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smart.35-181-65-213.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smartandsavvymom.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smartbperweb.q-exclusive.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smartcoiresolution.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smartcoiresolutions.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200047736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smarteducations.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200047737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smartgridsweek.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smartrecsyncauth.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smbc-bank-japancojp.xiongzhiwangluo.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200047740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smbc-bank-japancojp.xpnyxxw.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200047741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smbc-bank-japancojp.xueyuantong.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200047742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smbc-bank-japancojp.ycrsjg.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200047743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smbc-bank-japancojp.ygmfoce.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200047744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smbc-bank-japancojp.yichenshengwu.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200047745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smbc-bank-japancojp.yihengwangye.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200047746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smbc-bank-japancojp.yilingguzhen.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200047747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smbc-bank-japancojp.yoyo-poker.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200047748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smbc-bank-japancojp.yuanfengdrybag05.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200047749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smbc-bank-japancojp.zhengrongme.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200047750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smbc-bank-japancojp.zhongxiawenhua.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200047751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smbc-bank-japancojp.zjwzk3.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200047752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smbusercards.33uv65.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smeiikhq.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200047754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smepp.uninp.edu.rs"; content:"Host"; http_header; classtype:attempted-recon; sid:200047755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smex.hnmwks.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smfri.hortcy.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smgolamalif.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200047758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smi.onlygfpics.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smit.z13.web.core.windows.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smkkesehatanjember.sch.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200047761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smksyscheck.zapto.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smokeworldtempe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smphomeapplianceservice.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smqzdxqqeq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sms-get.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smsenligne.myfreesites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smsmms.flazio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smsmssaaa.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smsorangephonemail.myfreesites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smsorangesmsmessage.myfreesites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smss-ecu.confirmss.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smsverificationmms.myfreesites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sn-066660.ultimatefreehost.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200047774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sn-28273739.ihostfull.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sn0010192920.byethost5.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sn01002900.byethost5.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sn28393030.liveblog365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sn91892939.byethost15.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"snailonwheels.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"snaurth-mcclioush-hiaoth.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"snbcvertess.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"snbcvertess.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sndspnuztf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sneakyusefulspheres737829.bienvenidomks.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"snffeqmezu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"snikhers.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"snkzkureia.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"snn919200390.liveblog365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"snowy-recipbaf.f57ny24z.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"snowy-shadow-0713.montez9.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"snowy-viol.topijerami.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"snphrrxiyn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"snpwmmtsry.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"snt-manometr.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200047795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"snzcyfiiom.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"soarcondicionado.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sobat-kaltara.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sofe-firma.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"soft-waterfall-85d3.henhigay285.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"softbanki.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200047801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"softboxtechnologies.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"softsuperiordriverwrapper.bebesol12.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solana-airdrop.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200047804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solana-magiccdcnio-emporiostarita.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solana-magiceden-connecteletrossetti.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solana-meta.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solana-meta.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solana-vip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solanabonus.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solanabsmarketing.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solanacare.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200047812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solanahackerhouse.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solanamagic-edenio-hortifrutidoalemao.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solanameta.art"; content:"Host"; http_header; classtype:attempted-recon; sid:200047815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solanatimes.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200047816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solawi-edlendorf.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200047817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"soleilformation.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200047818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solgasmedical.com.ve"; content:"Host"; http_header; classtype:attempted-recon; sid:200047819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solicitudbccr-fi-digital.webnode.es"; content:"Host"; http_header; classtype:attempted-recon; sid:200047820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solicitudes.prestamosuperefectivo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solicitudesrapidasexpressdesdetuwebpmovilapps.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200047822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solicitudprestamoalinstante-lbkperu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solidstoneinterlocking.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"soliserllc.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solitar.tempetahu.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solucao-para-todos.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solucionesach.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solucoes-para-nos.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solucoesr3.sslblindado.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solutionpack.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"somberunimportantfile.antonygomez1.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"somh.main.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200047833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sonicfood.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sonicrazer.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sonmeasr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sonybannk.life"; content:"Host"; http_header; classtype:attempted-recon; sid:200047837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sopin9743434.meat43.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"soportetec.soportetecnic26.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"soprer.soportetecnic27.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"soprole.ovalgroup.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200047841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"soricelli.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sosamediamanagement.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"soshopee.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200047844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sostituiscidispositivoweb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sothebyrealtys.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sotrime.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"souaxwaoh.myfreesites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"soultfh.frashfordz.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200047849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"soumya252000.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200047850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"soundigital.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200047851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"soupyinsecure843879devicedriver.bienvenidolksj.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"souroarorare.cloud"; content:"Host"; http_header; classtype:attempted-recon; sid:200047853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"southamerica-east1-clean-algebra-356021.cloudfunctions.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"southamerica-east1-hardy-magpie-334101.cloudfunctions.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"southamerica-east1-noted-minutia-330211.cloudfunctions.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"southplacerfire.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"southwireshop.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sowkchesyi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"soxkloxxzyoo.klovarqi.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"soybhjhgod.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sp379189.sitebeat.crazydomains.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sp435739.sitebeat.crazydomains.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sp477389.sitebeat.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200047864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sp539061.sitebeat.crazydomains.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spacesailer27.org.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200047866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spar-kundenhilfe-de.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spar-kundenservice-kundenlogin.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200047868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sparka-kontoeinzuge-de.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sparka-kunden-vorteil.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sparkasse-proton.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200047871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sparkasse.de-checking-2001.cfd"; content:"Host"; http_header; classtype:attempted-recon; sid:200047872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sparkasse.de-checking-3021.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sparkasse.de-checking-3026.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sparkasse.de-checking-3036.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sparkasse.de-server8.club"; content:"Host"; http_header; classtype:attempted-recon; sid:200047876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sparkasse.k-login.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200047877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sparkasse.rufnummer-bestaetigen.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sparkasse.service-kunden.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200047879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sparkasse.sp-sicherheitsupdate.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200047880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sparkasse.spk-banking.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200047881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sparkasse.spk-verifizierung.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200047882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sparkling-glitter-159f.scrtygdjahg.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sparrow2341263.ggskesto178201.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sparxinteriors.co.zw"; content:"Host"; http_header; classtype:attempted-recon; sid:200047885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spbelieve.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"specialsenepantengain.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spectrumstorageaccess.yahoosites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spedisci-bper.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spemail5.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200047890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spentamultimedia.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sperrgebuhr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spexac.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spfgttazok.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spindernew7.my.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200047895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spingame.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200047896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spinhost.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spirecg.corsetul-boston.ro"; content:"Host"; http_header; classtype:attempted-recon; sid:200047898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spiritswap-gow.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spite.olzq.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spite.uponant.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spjma.hortcy.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200047902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spk-aktiv.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200047903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spk-kunde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spk-login-support.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200047905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spkfod.coms.cso.gov.tt"; content:"Host"; http_header; classtype:attempted-recon; sid:200047906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spkzn1.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"splendid-malasada-c8f3d6.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"splservice.elementor.cloud"; content:"Host"; http_header; classtype:attempted-recon; sid:200047909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sport.protected-secur.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sports.news.navervcorp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sportsbetlogins.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sportsbrooks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sprechls.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spring-hill-80e4.westnooood.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spring-rain-5544.on.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spring-sun-a16f.pooosteeeddd.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spring-unit-2937.terser-ham-0g3631.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sprobki.space"; content:"Host"; http_header; classtype:attempted-recon; sid:200047919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sprtrcvry.cnfrmacn.scrthlp.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spvvivlkyk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spyix-wiaaa-aaaad-qenyq-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sqkufy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sqlmzjbcgz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sqmxcj.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sqqugayzup.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"squaomsoma.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"square-breeze49.8re42b1g.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"square-sea-4209.on.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"square-tooth-6e6c.deemgriff6215168.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sqvhmeyshl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"srchrank.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"srnbs-ctevrsesd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200047933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"srnbs-sueaerd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200047934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"srnbs-suocecd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200047935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"srv181563.hoster-test.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200047936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"srv182426.hoster-test.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200047937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ssenclave.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ssghibaswaps.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sshibasswaps.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sshiibaswap.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ssl-atendiment0-interno-ssl-gerencia00.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ssmsdtlbie.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ssnugiizjq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sso-raiffeisen-hu.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200047945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sso.gmo-a0z0ra.com.hhmjjg.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ssw2.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"st-hd-c1773.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"st-hd-c1773.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stablecostlyclassesjue2.jue222.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200047950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stablestakedao.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"staemcomnnunity.net.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200047952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"staenconmumlty.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200047953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stage-upgrade.nycgo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"staging-app.1inch.io.s3-website-us-west-1.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"staging.aisecureme.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"staging.drtungs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"staging.halaladvisor.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200047958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"staging.reactore.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stake.aavev2.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stake.krampusbsc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stake.lido-staking-fi.cam"; content:"Host"; http_header; classtype:attempted-recon; sid:200047962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stakinglidofi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stakingseedifyfund.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"staman.synology.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200047965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"standardoption.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stanfordconrad.bond"; content:"Host"; http_header; classtype:attempted-recon; sid:200047967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"star-dex.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200047968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"staratlas.os.com.tr"; content:"Host"; http_header; classtype:attempted-recon; sid:200047969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stariink.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"starlightdapps-webatuhs-document-xqx5k.ondigitalocean.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"starpolinamplainfaxlogin.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"starttsboxfile.myfreesites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200047973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"state-kz.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200047974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"state-kz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200047975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"static-promote.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"statisticssuccessheroes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"statsdiscord.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"statuesque-chimera-09bf6b.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"status-499678-mail-ups.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200047980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stay365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steadystack.enter-mint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamcommuenitey.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamcommunilts.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamcommunityl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamcommunityvk.asia"; content:"Host"; http_header; classtype:attempted-recon; sid:200047986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamcommunllty.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamcommunltym.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200047988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamcommunutiy.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200047989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamcommurnnity.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200047990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamcomunitly.org.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200047991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamconmmunlity.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200047992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamconmnuity.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200047993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamecomunity.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200047994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamscommuniity.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200047995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steancommunite.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200047996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steancommunytly.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200047997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steeamcommuniity.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200047998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steep-water-ae2b.weslaox.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200047999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steep.bengkakbibirkuuu.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steep.kacangrecinonfirem.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stellahuang.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"step2-9f5d0.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"step2-9f5d0.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"step3-efc8c.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"step3-efc8c.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"step4-30f38.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"step4-30f38.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"step5-62e6a.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"step5-62e6a.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stepapp-minting.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stephaniesmythe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stephendedwards.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stepn-solana.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stepp10-98e14.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stepp10-98e14.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stepp11-a7e2a.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stepp11-a7e2a.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stepp16-52ee1.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stepp16-52ee1.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stepp17-d761f.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stepp17-d761f.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stepp19-ced6c.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stepp19-ced6c.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stepp7-98a8e.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stepp7-98a8e.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stepp8-c4298.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stepp8-c4298.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stepp9-54a62.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stepp9-54a62.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steuber.qfhv5wsook-ewx3ldk9m6zq.p.temp-site.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200048031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stevemaddencanadashoes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stevemaddennetherlands.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stevemaddenoutletwebsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stevemaddenshoe.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stevencrews.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"still-mountain-a0ba.7pok2uvb.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stinpriza.org.alittlecrunchy.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stolizaparketa.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200048039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stollgroup.coms.cso.gov.tt"; content:"Host"; http_header; classtype:attempted-recon; sid:200048040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stompawzed.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stonexstrade.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"storage-ow.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"storage.yandexcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"storageapi-new.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"storageapi-stg.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"storeihpost.5455554553.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200048047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"storeinfo-dpd.74215485555.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200048048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"storenike365.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"storesouthwire.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"story-room.choregraphy.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stpgssdxmo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"str-hmcfi4.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200048053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"str-tkgoz4.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200048054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"strangeculturedvendors.papibancolombia.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"streeteasy-ccbe7.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"streeteasy-ccbe7.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stridentligbancolombia365.ingresaclavee.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"strikeitalia.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"strocking.faqserv.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"strugglestokids.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stuckglue.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"studentfinance-help.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"studentfinance-help.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"studio-lol.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"studioglobalfashion.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"studiospera.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stuffnstuff.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stupina.eu"; content:"Host"; http_header; classtype:attempted-recon; sid:200048069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stuttgart-valley.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200048070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stuye3890.byethost6.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stwwcyfmup.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stylesourcingbd.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stylifehomedecors.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"su.vc"; content:"Host"; http_header; classtype:attempted-recon; sid:200048075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"suacasamaislinda-sp16.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200048076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"suacredonline24h.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"suas-solucoes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"suasseetingsaretydcdccoom.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200048079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sub-dia-dos-pais2022.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sub-sacolaprodut0817.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"subday-produt0223.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"subeng.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200048083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"subindobsh.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"submaaicurrentlyversioz2.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200048085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"submarin0.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"submit-form.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"submit.tax.refund.lpivp.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200048088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"submitbiding.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"submitted.formspark.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200048090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"subscription-create-bd7435.ingress-comporellon.ewp.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200048091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"subsmartlink09.eventlink.to"; content:"Host"; http_header; classtype:attempted-recon; sid:200048092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"subsworker.bid"; content:"Host"; http_header; classtype:attempted-recon; sid:200048093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"subulussalamkota.desa.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200048094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"successwithtarun.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sucursal-virtualbancolombia.banco0.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sucursal.bancolombiaag.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sucursalbancolombia.virtualweb2.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sucursalbancolombiaproteccion.reactivar01.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sucursalgrupobancolombiaiennagiddyaggregator.clavedinamica33.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sucursalpersonasbancolombiaenliea.bancaenlinevp.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sucursalpersonastransaccionesbancolombia-1.bancavirtual223.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sucursalpersonastransaccionesbancolombia1.asesorvirtual1.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sucursalscotibank.virtual2022.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sucursalsegurabancolombila.gruposeguro.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sucursalvirtual.bancobig.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sucursalvirtual.bancolombia1222.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sucursalvirtualbancolombia.web92.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sucursalvirtualdepersonas-10.bancoolombiamns.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sucursalvirtualdepersonas-14.bancoolombiamns.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"suelunn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sui-claim.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"suisspost-validation-transaction.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"suit.unward.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"suiviticket.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"suivremypost24.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sujatasinghi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sultan-raza.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200048118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sumary.repport-fb.accts-protocol.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sumicorp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"summary-fb.report-accts-notification.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"summary-protocol.report-accts-notification.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sumup-payments.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sunbeamfarms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"suneos.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200048125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sunnylandingpages.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sunnymediumbluemaps.pichiinfh4.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sunvallleyspply.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sup0.colwqje211.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"supaknottss.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"supe.seharusnyakita.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"super-bahia.azurewebsites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"super-black-americanas-queero.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"super-block-1b89.tmp6n9c0.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"super-mud-e630.poolesdgj.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"super.travisjohnson17.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"superaprendizajealfa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"supercandon.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"supercuteworld.web3-mint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"supernovembro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"superofertasblackfriday.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"superrefund183798.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"superrefund183798.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"superwingame.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200048144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"supla-web.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200048145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"suporteonlineamarelo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"supp0rt-ovh.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"support-caseid.1009865106305206930.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"support-flu-cas-cz.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"support-helpcenter716262119.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"support-helpcenter716262119.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"support-inbox-case011921.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"support-inbox-case011921.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"support-paiement-securise.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200048154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"support-usps.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"support.azoi-0xnzoan.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200048156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"support.azoi-ooesnaan.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200048157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"support.azom-nonazn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200048158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"supportagir.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200048159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"supportmetamasks.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"supportsector15.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"supportverification.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200048162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"suprabus.rw"; content:"Host"; http_header; classtype:attempted-recon; sid:200048163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"supremekong.after-mint.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200048164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"suprim.com.np"; content:"Host"; http_header; classtype:attempted-recon; sid:200048165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sur3cr.csb.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"surferswim.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"surre-107332.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"surveyol.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"susangerd.ir"; content:"Host"; http_header; classtype:attempted-recon; sid:200048170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"suseguridaeslannuestra.8ancolombiaa.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sushirunner.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sushiswaps.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200048173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sushiswaps.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200048174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sushiswapx.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sushiswfsdfgdfbc.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sustainablefoodtruck.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sutherlanglobal.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"suyi.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200048179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sv68.wadax.ne.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200048180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"svargast.melonwoodhomes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"svasa-homes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sveltepassionatedebugmonitor.cholisalaera.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"svgufcw-pqz-7.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200048184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"svlncezwda.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"svmgroup.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200048186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"svnbpaognr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"svnublyhql.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"svnzsmtrsg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"svpereqekl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"svqcjjpuuu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"svrzlu.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sw-kut8.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sw-oktg.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"swaggerhub-noprod.mibanco.com.pe"; content:"Host"; http_header; classtype:attempted-recon; sid:200048195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"swal.tasarte.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200048196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"swancommunications.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"swanholm.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"swap-bsc.tokentool.club"; content:"Host"; http_header; classtype:attempted-recon; sid:200048199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"swappauto.staging.lcsolutions.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200048200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"swaptoday.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200048201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"swapuni.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"swedbanklv-update.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"swedbanklv-update.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sweekaar.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sweet-heart-f801.westerpoored.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sweet-lab-7399.on.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sweet-perlman.51-178-28-217.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200048208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sweet-sea-37d9.vgreengolf8866.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sweet-sea-ee14.chaos5034.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sweetlikehoneyartco.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sweetlvejdhy3a16495jjfu93324sourcehpeit7vnyueeeuueu.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"swipeindustry.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"swiquw09-wjwow9.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"swiquw09-wjwow9.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"swisersystem.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"swiss.pass.benefits.sbb.52-157-105-58.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"swissconcours.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"swissdelv-be303c.ingress-earth.ewp.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200048219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"swissposten.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"switstart.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"switzapps.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"swp-connect-poocoin.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"swrllp-0utlook-london-shar3point.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"swrllp-0utlook-london-shar3point.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sx6l7a.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sxardjjcbc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sxb1plvwcpnl497368.prod.sxb1.secureserver.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sxdgmemgnk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sxhuddfoob.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sxmpjzmnct.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sxocsyqcld.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sxsuaesmesaamevs.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sxu2s4wm5tca2dc9e1privaterelay-appleid433.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"syatwea.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"syawpxbdpz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sygeforsikring.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sygeforsikring.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"symppzicmg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"synaxisreadymix.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sync-rectificationerrors.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sync-tool.tech"; content:"Host"; http_header; classtype:attempted-recon; sid:200048242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sync-wallets.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200048243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sync.mainrectify.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"syncbotzfixer.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"synchpnxtsxl02.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"synchpnxtsxl02.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"synchpnxtsxl04.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"synchpnxtsxl04.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"synchpnxtsxl05.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"synchpnxtsxl05.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"synchpnxtsxl06.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"synchpnxtsxl06.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"synchronisation03-1b705.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"synchronizeconnectssn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"syncwldapp.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"syndpps.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"syndpps.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"syneos.benefitsaccess.ehr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"syneos.gsgcloud.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"syneos.tech"; content:"Host"; http_header; classtype:attempted-recon; sid:200048261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"syneoshealth-iso9001.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"syneoshealthlondon.co.uk.admin-eu.cas.ms"; content:"Host"; http_header; classtype:attempted-recon; sid:200048263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"syneoshealthlondon.co.uk.admin-eu2.cas.ms"; content:"Host"; http_header; classtype:attempted-recon; sid:200048264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"syneoshealthlondon.co.uk.admin-mcas.ms"; content:"Host"; http_header; classtype:attempted-recon; sid:200048265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"syneoshealthlondon.co.uk.admin-us.cas.ms"; content:"Host"; http_header; classtype:attempted-recon; sid:200048266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"syneoshealthlondon.co.uk.admin-us2.cas.ms"; content:"Host"; http_header; classtype:attempted-recon; sid:200048267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"syneoshealthlondon.co.uk.admin-us3.cas.ms"; content:"Host"; http_header; classtype:attempted-recon; sid:200048268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"syneoshealthlondon.co.uk.eu.cas.ms"; content:"Host"; http_header; classtype:attempted-recon; sid:200048269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"syneoshealthlondon.co.uk.eu2.cas.ms"; content:"Host"; http_header; classtype:attempted-recon; sid:200048270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"syneoshealthlondon.co.uk.mcas.ms"; content:"Host"; http_header; classtype:attempted-recon; sid:200048271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"syneoshealthlondon.co.uk.us.cas.ms"; content:"Host"; http_header; classtype:attempted-recon; sid:200048272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"syneoshealthlondon.co.uk.us2.cas.ms"; content:"Host"; http_header; classtype:attempted-recon; sid:200048273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"syneoshealthlondon.co.uk.us3.cas.ms"; content:"Host"; http_header; classtype:attempted-recon; sid:200048274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"synergy.do"; content:"Host"; http_header; classtype:attempted-recon; sid:200048275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"synews.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"synslabs.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"synslabs.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"synthetix.claims"; content:"Host"; http_header; classtype:attempted-recon; sid:200048279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"synwalletsdapp.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200048280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"systemsynchronise.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"systemyopal170820.webpichc1709212.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"szg2ro.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"szgizxaaji.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"szhqqnbvwy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"szmol.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"szmxwu8kzie5v.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"szoptoirib.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"szslptishk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"szwkdirmfr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"szxpo.needile.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200048291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"t-106846-1276543.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200048292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"t-casting-x.conohawing.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"t2do64.csb.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"t2xmzm.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"t3tvg-kiaaa-aaaad-qebrq-cai.ic.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"t4lxo0.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"taanug.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tabithamarlowe.bond"; content:"Host"; http_header; classtype:attempted-recon; sid:200048299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tabybpmmgf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"taderbitkub.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tagagsh7-sfha.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tagagsh7-sfha.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"taher-mohamed-ahmed-saad.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200048304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tahfsqplma.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"taishin-co.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"taiwanlotterys-tw.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"takarekdank.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200048308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"takarekonline.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200048309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"taleandwhale.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"talkarek.hu-elite.tech"; content:"Host"; http_header; classtype:attempted-recon; sid:200048311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"talkarek.hu-login.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200048312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"talkarek.hu-service.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200048313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"talkarek.hu-service.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"talkarek.hungary-services.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200048315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"talktalkea.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tamaadoge.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tamarafreitas.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tambunanajaa.martulangsore.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tamewallet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tamutimes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"taniacuevas.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"taockrxncq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tarjtau.influy.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tascadasfodinhas.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"taupe-sprite-67ab1d.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"taxinfo.blob.core.windows.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"taxnta-jp.wqsznkp.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200048328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"taxntago-jp.2z6fc1.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200048329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"taxntago-jp.b82n0qi.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200048330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"taxntajp.wbotas.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tb.x4qk.abruzzo-food.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200048332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tb915hdh89.mfs.gg"; content:"Host"; http_header; classtype:attempted-recon; sid:200048333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tbblcjapdh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tby.eb-sites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tcaconnect.ac-page.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tccs.or.tz"; content:"Host"; http_header; classtype:attempted-recon; sid:200048337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tcdfcscprf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tcmjwthiuh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tcoe.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200048340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tcufaq.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tdlsnwrjcq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tdoftpfdlu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tdsecurities.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tdsecurities.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tdsslu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tdsszxopyf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tea.worldnewspress.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tealimpishrectangle.mansteriler.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"teamex.com.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200048350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"teamgoogle125590.psee.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200048351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"teammelonhead.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tebapit.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"techifygeeks.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"techlens.com.tr"; content:"Host"; http_header; classtype:attempted-recon; sid:200048355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"technews.techreports.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200048356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"techniair.ma"; content:"Host"; http_header; classtype:attempted-recon; sid:200048357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"technicalstore.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200048358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"techservercod.dns.army"; content:"Host"; http_header; classtype:attempted-recon; sid:200048359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"teckph.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tecmachine.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200048361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tecno4me.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tecnofestasweb.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tecnominproductos.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"teekitstorage.blob.core.windows.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"teenageairhead.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"teenmg.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tehacarrasa.topijerami.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tejiyglfvy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"teknob.my.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200048370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telasfakesantamarta.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telegrampromotion.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telhanorte-90.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tell.loseair.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tell.sulcfic.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tellmeliu.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200048376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telstra-823a7434e49e.intercom-clicks.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"templat65sldh.myfreesites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"temporary-url.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tennesseejdmmotors.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tentecspa.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200048381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"terapigo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tere89-hus78.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"terjalapakkz.topijerami.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"terradong.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200048385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tes.umtas.ac.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200048386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"test.lonase.sn"; content:"Host"; http_header; classtype:attempted-recon; sid:200048387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"test.staypoland.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"test.webclient4.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200048389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"test2.blackzdesignz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"testingmir.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200048391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tetfydxbya.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tether.coinbase-defimining.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"texasfreedomrun.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"texstaff01.bitbucket.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200048395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tfin8o.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tfiztxzpzx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tfoeuocisr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tfxkn-uyaaa-aaaad-qen7q-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tg.pe"; content:"Host"; http_header; classtype:attempted-recon; sid:200048400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tgcmex.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tgf6540cv.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tggworld.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tgioqoeite.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tgjtopycyz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tgkcljbaoy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tgryumxfoa.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tgrzqirgec.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tguudfixsc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tha-office06.onedrive0001.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"that.trahoon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thdkdy.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"the-arenaa.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"the-pancakeswap.thinkific.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"theartofbridge.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"theauthentication.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200048416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thecollaband.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thecollegenetwork.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thedailymoneytips.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thedamesofficial.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thediamondcloset.co.za"; content:"Host"; http_header; classtype:attempted-recon; sid:200048421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thedreamstudio.co.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200048422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thedrinkersnepal.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"theglowconference.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thegodanft.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200048425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thegoodshepherd.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200048426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thegreenvillehousingauthority.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thehappyfactory.eu"; content:"Host"; http_header; classtype:attempted-recon; sid:200048428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thehillslc.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200048429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thehopprotocol.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"theinvestock.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"theinvestock22.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"themarketprof.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"themettaworkshop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"themichaelleeband.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"theology.seramporecollege.ac.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200048436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thepenwriters.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"theplague.the-premint.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200048438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thera-lebalncsame.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thera-lebalncsame.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"theri-se.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"therocketfactory.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200048442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"therrgroup.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thesandbox.invite-mint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thesecuretb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thespace.finance"; content:"Host"; http_header; classtype:attempted-recon; sid:200048446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thespaghettisandwich.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"theufa.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200048448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thevacationworld.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thevideosuite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thevinylspectrum.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thinhanphatco.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thinkgear.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200048453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thirsty-fermi.20-3-248-177.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200048454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tholjddxed.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thomas-bella-01.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thongtacconghanoi.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thorny.nativeweb.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"threesweetscakes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thriving-concha-7bf210.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"throbbing-lake3b1.yzqquix4.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"throbbing-paper-b06a.kimupson47353.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"throbbing-wildflower-4625.roundcubeupdateq.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tiagolu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tiburontest.icertified.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tibxfc.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tickledcom.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tidal-claims-rewards-erc20.airdrop-holder.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tienda.soniagonzalez.es"; content:"Host"; http_header; classtype:attempted-recon; sid:200048469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tiendadecafe.com.ar"; content:"Host"; http_header; classtype:attempted-recon; sid:200048470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tight-cell-853d.whybed6896573.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tilbagebetaling-skat.dk"; content:"Host"; http_header; classtype:attempted-recon; sid:200048472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tilmnofdil.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tiltodaspe.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"time14.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tinparadise.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tintedspitefulsyntax.li93e2fi.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tinu.be"; content:"Host"; http_header; classtype:attempted-recon; sid:200048478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tinyproofinvoices.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tipografieonline.ro"; content:"Host"; http_header; classtype:attempted-recon; sid:200048480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tiredfirebricktruespace.bancolombiaxc3.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tirnanognewbridge.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tiro.fineee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tiro.servess.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tivsdpfuuu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tj6qhe.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tjvh-28bea.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tjvh-28bea.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tjzzedjyua.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tk-portal-pode-contar-bns.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tkecwrodal.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tkiwfmmaya.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tkjb2019.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tlatx.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tlcbcp.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200048495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tlcbcup.eu"; content:"Host"; http_header; classtype:attempted-recon; sid:200048496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tlcbsp.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200048497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tle-gentoo-xuhi.instawp.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200048498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tleqz.fronten.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200048499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tliwadsznj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tljjlorqgh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tlveargkoa.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tlzagywhde.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tmac.finance"; content:"Host"; http_header; classtype:attempted-recon; sid:200048504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tmessagebillingtinternet.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tmmkknlmss.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tncn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tnfabdxxnk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tnijurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tnnhdvblgb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tnrustwallet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tnvlyxemom.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"to.podlink.to"; content:"Host"; http_header; classtype:attempted-recon; sid:200048513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"toddler-town.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"todoscontrini.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200048515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tofara.nimbusqc.ca"; content:"Host"; http_header; classtype:attempted-recon; sid:200048516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"token-change.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tokenannex.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tokenfixit.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tokenlonwallet.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tokyolabnft.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200048521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tombosdir.bond"; content:"Host"; http_header; classtype:attempted-recon; sid:200048522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tomsidney.bond"; content:"Host"; http_header; classtype:attempted-recon; sid:200048523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tonymott.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tooator.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tool.dinsad.eu"; content:"Host"; http_header; classtype:attempted-recon; sid:200048526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"toolsouthwire.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"toothsome-dull-banjo.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200048528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"toowoombabsb.org.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200048529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"top10autoresponders.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"topplexusa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"topskills.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200048532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"topstairs.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200048533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"topstocksolutions.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"torccolborrachas.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tornunhappypolyhedron.oficial00.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tortileagg.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tostudydrycleaning.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200048538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"toursbangla.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"towering-purple-seahorse.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200048540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"towncountryimplement.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"toyocamycin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tpbvnk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tpezdzbwqt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tpnoqxxscv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tpsbroadcasthire.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tptaudjhlq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tpuhhhzmsz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tpvohwrvdm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tqaaggyins.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tqjiqtalin.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tqqsebwkdm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tr4qw.phpklt.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"track-10083.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"track-10083.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"track-20934.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"track-20934.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"track-70591-ups-mail.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"track-e7f1a-consign-ups.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"track-id2012.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"track-id2012.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"track-id2911.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"track-id2911.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"track-id4190.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"track-id4190.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"track-id7297.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"track-id7297.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"track-id8982.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"track-id8982.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"track-redeliver.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"track-redeliver.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"track-uspspackage.gotdns.ch"; content:"Host"; http_header; classtype:attempted-recon; sid:200048572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trackeingconventschool.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trackeingconventschool.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tracker.dhsgovn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trackerc.osend.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200048576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trackgroups.unaux.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tracking-elta.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tracking.flowii.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tracking.parcelshipments.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tracking.selfserviceib.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trackposta-si.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"traclkingonline-expess.gestaorestaurante.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200048583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tract.pagesrepoart.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trade-iq-option-2021.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tradebankweb.tradewebvi.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tradepoocoin.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200048587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trader.uniocean.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tradingdappnodes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trainedediblebutton.bienlineab.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trainthemind.co.za"; content:"Host"; http_header; classtype:attempted-recon; sid:200048591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tramacol0001.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200048592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tramacol123.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200048593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trams.mot.go.th"; content:"Host"; http_header; classtype:attempted-recon; sid:200048594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"transacciowebca.omewebacce.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"transfer-wisea.app.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200048596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"transferencias-retenidas.zonas-seguraviabcp.pe.tvactiva.com.ar"; content:"Host"; http_header; classtype:attempted-recon; sid:200048597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"transilvania-camping.ro"; content:"Host"; http_header; classtype:attempted-recon; sid:200048598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"transitioncap.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"transnetsporterminal.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"transparentdelightfulpolyhedron.davi9875.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"transproyal.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200048602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trasfigurables.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trasfigurables.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"traspad-pancakeswap.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"traspad-pancakeswap.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trastpad-pancakeswap.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"travelvisit-mexico.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"travlamp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"traxxcon.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trbggbtlih.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"treegeek.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trendy-shoes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trhggd.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tribelio.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200048615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tribotech.pk"; content:"Host"; http_header; classtype:attempted-recon; sid:200048616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tribufin.co.zw"; content:"Host"; http_header; classtype:attempted-recon; sid:200048617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tribunbalikpapan.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"triglobe.com.ph"; content:"Host"; http_header; classtype:attempted-recon; sid:200048619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trini.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trippcreativeco.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tristatemortgagepro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tritonpass.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"triumphealth.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trjyufxkff.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trolllwarlordhuskar.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tromp.gbtefxryt7-95m32xerr6rv.p.temp-site.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200048627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tron-tronlink.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tronlinckcs-wallet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tronlinkapp.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"troubled-dashing-cornflower.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200048631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"troyohhice.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trsqzpvbub.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trstyseytdyde.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trt.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"truegrip.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trul-hoteis.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"truongluong.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"truslpad.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"truspad-axieinfinity.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"truspad-bondly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"truspad-ferrum.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"truspad-magiccraft.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"truspad-pancakeswap.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"truspad-pancakeswap.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trust-walletcoinset.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trustacoaching.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trustepad.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trustpad-event.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trustpad-ex.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trustpadx.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200048651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trusttwallet.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trustwallettop.easy.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trustworthyhandsomecoins.smsasmsa.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trx-refund.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trya673434.260mb.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ts.hust.edu.vn"; content:"Host"; http_header; classtype:attempted-recon; sid:200048657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tshhii.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tsivuhgklm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tsjhuuqoef.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tsoght.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200048661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tstapegjna.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tsunami.some-persons-ac.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tt4s8h.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ttatithorritati.podcastheritage.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200048665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ttcswap.finance"; content:"Host"; http_header; classtype:attempted-recon; sid:200048666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tthoysckpa.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ttoonft.to-minting.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ttqr-104422.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tttszefimm.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tttszefimm.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ttuafnxckp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tubs-ki.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tucanademo.com.ng"; content:"Host"; http_header; classtype:attempted-recon; sid:200048674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tucwskvxcg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tuewm001.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tuiniytldy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tukofertas.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200048678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tullrbfxhj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tuneahyt1.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200048680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tunecap84683hunjan743.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200048681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tunecapi1008443943miakn.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200048682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tunecapi1043943diankata.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200048683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tunecapina985393tunkia1.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200048684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tunecaptchaii13.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200048685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tunecaptchajhg9.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200048686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tunecaptchajj3.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200048687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tunecaptchajzz6.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200048688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tunecaptchali15.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200048689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tunecaptchalk14.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200048690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tunecaptchall8.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200048691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tunecaptchaww11.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200048692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tuno77mail.formjelly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tuqya1616taa.unaux.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"turnerboone.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"turstwallet.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200048696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tutor.iqsademo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tuya-online.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200048698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tuyainiciarcarlo.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200048699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tuyajdnjsnfsn.liveblog365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tuyarvadsghdfdg.great-site.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tuyatargetone.ihostfull.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tuzncutpzd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tvgcp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tvgkfmoklw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tvtftcgssa.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tvvbrvncbv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tw-post.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200048708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"twbxdgqnet.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"twilig.semangatpuasaaa.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"twilight-heart-6678.on.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"twilight.recomfiermsite.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"twinthunderousbytecodeclavedinamica.segbancolombia.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"twitchtubecreators.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"twsfvcdwvd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"twzsjadtyc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tx.gl"; content:"Host"; http_header; classtype:attempted-recon; sid:200048717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"txhansahcu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"txsolut001.bitbucket.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200048719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"txwsvksihs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"txxurhbaan.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tyaprtlahsbj.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200048722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tyden.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200048723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tyttt-5db0c.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tyttt-5db0c.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tyty-11a7e.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tyty-11a7e.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tyuioiuyrdfgh.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tywkboscqj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tzhtjtbmac.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tzivirubin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"u0x6jm.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"u14511627.ct.sendgrid.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"u1806476.plsk.regruhosting.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200048734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"u1839233.plsk.regruhosting.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200048735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"u1839523.plsk.regruhosting.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200048736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"u1ti33.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"u22dyda57u29x158.tiberiusresidence.ro"; content:"Host"; http_header; classtype:attempted-recon; sid:200048738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"u3vii.codesandbox.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200048739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"u8277473-2933.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"u8283773-3994.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"u8xdqs.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"u90n.y23v.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uaa-bec4fa.ingress-earth.ewp.live.moderndental.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200048744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uaedubaiflying.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uaeubzbxdp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uagzjjjwpm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uaktz.valiist.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200048748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uallvxilcn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uat-new.wcv.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ubangr-scure-grnet.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uberiovo.hr"; content:"Host"; http_header; classtype:attempted-recon; sid:200048752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ubvxtwdlra.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ubxcmypnuq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uconn-edu-online.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ucsclean.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ucxkcjfscr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uczxogfafe.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uddy-mouse-ripa.instawp.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200048759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"udhbbockwu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"udumujj.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200048761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"udwacwgwye.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ueberpr-2022buergerverg.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200048763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ueejwublov.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ueiwbzwheq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uetxqmsuue.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uforce-defi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ufsdvfjmpc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uftoken.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ufvewpljgp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ughnxdvnhn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ugnjscijld.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ugyftdraq.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200048773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uhidzvsnrq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uhiswap.space"; content:"Host"; http_header; classtype:attempted-recon; sid:200048775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uhiverso.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uhlswap.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200048777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uidhntfysq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uieoctjcca.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uihgajlgux.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uikwhuppie.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uin-bltkub-in.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200048782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uiu-uwim3.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200048783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uiwiwierguwygut.4qwqsljgm1-xmz4qm7yp62o.p.temp-site.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200048784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ujd9km.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ujfccwdphk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ujfygh.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ujwetqiazt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uk-0utlook-london-shar3point.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uk-0utlook-london-shar3point.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uk-energy-rebate.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uk-evri-package.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uk-evri-package.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uksxbroijv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uletyvsrxw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ulgroup.ca"; content:"Host"; http_header; classtype:attempted-recon; sid:200048796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ulntcvreki.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ulthsltzqc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ultraluxrestoration.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ulttxuohje.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ulzqgxjvgn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"um.i5lqf.alittlecrunchy.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"umbrelnodes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ume.la"; content:"Host"; http_header; classtype:attempted-recon; sid:200048804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"umfrage.sbb.cff.20-77-171-113.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"umioipdhrd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"umstellen.ctmortgagerates.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"un1cef.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unam.myfreesites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unbounce.lnk.to"; content:"Host"; http_header; classtype:attempted-recon; sid:200048810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uncommonidealmodule--user0908.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"undhadsamaj.co.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200048812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uneedparts.ca"; content:"Host"; http_header; classtype:attempted-recon; sid:200048813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unenergy.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unfitfrayedorder3423.lonelywjd.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unfsfqadtl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unhealthy332.alljack.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uni-bamberg-database.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uni-wuerzburg.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uniassessoria.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200048820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unibe-post-admin.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unicornuw-web-dot-sharepointexcel-362410.uk.r.appspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unicreditaustria.ucs.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200048823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unilickingloci.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unionheightsresidental.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unipar.audixpress.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200048826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uniparhml.audixpress.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200048827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unique-illustrious-amaranthus.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200048828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unique-ksa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unisonsouthayr.org.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200048830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unisorb-0utl00k-storage.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unisorb-0utl00k-storage.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unisvvap.com.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200048833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unisvvap.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200048834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uniswap-event.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uniswap.casa"; content:"Host"; http_header; classtype:attempted-recon; sid:200048836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uniswap.codeislaw.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uniswap.com.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200048838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uniswap.express"; content:"Host"; http_header; classtype:attempted-recon; sid:200048839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uniswap.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200048840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uniswap.lv"; content:"Host"; http_header; classtype:attempted-recon; sid:200048841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uniswap.openwallet.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uniswap.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uniswap.samvitello.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uniswap.token.im"; content:"Host"; http_header; classtype:attempted-recon; sid:200048845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uniswap.umidao.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uniswap.v2.testnet.pulsechain.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uniswapfinancing.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200048848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unitedoil-eg.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unitedsolutions.pk"; content:"Host"; http_header; classtype:attempted-recon; sid:200048850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unitybrazilmail.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"univ-frr.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"univ-frr.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"universaladvancedpainting.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"universo1420.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unjardinideal.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unjknlphfo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unleashed.inmint.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200048858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unlinecreditservice.myftp.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unlockon.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unnaturedlifestyle.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unniswap.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unoiqueglobakkygoooglemamazingveryfuilsjhejeuiryrea.s3.us-east-2.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unojapano.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unrxytldyv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unsub.listhandlr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unusual-activity-review.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unwkxjgliz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uoppof.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uotyncqhle.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"up.xino.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200048871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"upbearin.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200048872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"upceshop.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200048873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"update-access-tynbmfgcviy.w3spaces.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"update-brimoku.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"update-filedoc.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"update-forms-reports.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"update-kyc-sbi.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"update-kyc-sbi.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"update-mail-settings-confg.s3.sa-east-1.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"update.attservice.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"update.information.adsptr4.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200048882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"update.information.dav1n4.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200048883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"update.swan-erickson.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"update.yamatotransport.yamotalogistics.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"updatecom.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"updatefil-doc.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"updatefile-records.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"updateform-record.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"updateid_bc01a0d48d.itsaol.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"updatemailbox01.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200048891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"updatemybperritaly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"updatenow2.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"updaterecords-forms.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"updatess.cfzijxcsp.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200048895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"updateyouremailnow.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200048896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"updation-28a1f.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"updation-28a1f.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"updte.maulikgohel1.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"upgrade-server-2023.royalwaysdemo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"upgrademymail.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"upgradepageatt1.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200048902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"upload1docportal.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uploadapplied-file.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ups-serviceupdate.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ups.package-tracking-tool.antxxj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ups.package-tracking-tool.datouwhkji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ups.package-tracking-tool.huikaihao.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ups.package-tracking-tool.kwfynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ups.package-tracking-tool.mfxirr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ups.package-tracking-tool.ntzdhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ups.package-tracking-tool.tksfbn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ups.package-tracking-tool.udijhx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ups.package.datouwhkji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"upsassistance.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"upscheckoutdelivery.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"upsdeliveryassist.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"upsorderhelp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"upssptip.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"upsystemgroup.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200048920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"upyooofhsh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"upyq8ess.dreamwp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uqjarrwvjs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ur-lifemore.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200048924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ur.sjass.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"urbanautomotive.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200048926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uri.im"; content:"Host"; http_header; classtype:attempted-recon; sid:200048927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uriswap.com.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200048928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uriswap.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200048929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"url-x.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200048930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"url.fti.or.th"; content:"Host"; http_header; classtype:attempted-recon; sid:200048931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"url.xcode.no"; content:"Host"; http_header; classtype:attempted-recon; sid:200048932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"urli.ws"; content:"Host"; http_header; classtype:attempted-recon; sid:200048933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"urlo.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200048934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"urloajuttz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"urlshortner.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"urnic.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"urxsybzwwh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"us-brooksrun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"us-chickvspop.yousweeps.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"us-east1-diesel-practice-355319.cloudfunctions.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"us-east1-inbound-hawk-354403.cloudfunctions.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"us-east1-valid-arc-109017.cloudfunctions.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"us-east4-clean-algebra-356021.cloudfunctions.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"us-irs.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200048945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"us-n.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"us-post-online-service-delivery.builderallwppro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"us-west2-semiotic-karma-356909.cloudfunctions.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"us-west4-mercurial-idiom-334123.cloudfunctions.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200048949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"us1.zonka.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200048950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"us1ps-on1in3adm1n60bl-ne6tew2bci1t1its.misecure.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usaabutler.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usaabutler.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usaaconventschool.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usaaconventschool.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200048955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usacreditdatabase.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usaps-track.ixibob.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usaps-track.polshtt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usaus-ps.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200048959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usdcbonus.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usdcgift.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usdfninmxq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usdt-finance.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200048963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usdt-pos.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200048964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usdt-trx.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200048965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"user-20045744113235.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200048966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"user-mtb01.hufeer.ir"; content:"Host"; http_header; classtype:attempted-recon; sid:200048967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"user-olivierclemot.flazio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"userboitevocalweb.flazio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"users.tpg.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200048970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usiminas-ipatinga-u002.sistemastorage.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200048971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usppwi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps-coma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps-come.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps-comj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps-comq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps-help.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps-informed-delivery.zyns.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps-shiphelp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com.alwasl-syria.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.dcssjw.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200048981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uspsassistdelivery.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uspsdelivery-help.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uspsdelivery-support.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uspsdeliveryassistance.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uspshelpmydelivery.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uspshelpship.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uspshelpshipping.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uspsmydeliveryassist.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uspspuczz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uspsrequesting.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uspsshippinghelp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uspsshippingupdate.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uspssi.tech"; content:"Host"; http_header; classtype:attempted-recon; sid:200048994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uspssuccess.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200048995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uspsusa-expres-bca085.ingress-florina.ewp.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200048996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ussp.life"; content:"Host"; http_header; classtype:attempted-recon; sid:200048997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ussposit.ausolid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ussppss.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200048999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usual36d80rbfckcycaur7dpzby0y2q54vrue31emaitaxmyy.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uswglybgqa.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"utdwyhmsyx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"utentediretto.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uthdqgoaau.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200049004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"utisztagjt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"utoygghdyg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"utwluyplxw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uudl59.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200049008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uugxhhpczf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uuycplddmd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uv09s6357.riggearf.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uverdnes.cz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uviworld.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200049013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uvkhw.sooneur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uvkxpunzwj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uvnwabslso.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uvodvtyenz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uvvxovihkr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uvxdprfgwf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uvydzkgyvj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uwpanxmdup.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uxpsiqjdni.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uxqxgkflfe.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uxs8ti.csb.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200049024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uydcejnnsb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uyhlqbdalm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uyiojpy6uui980p.onedrive0001.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200049027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uyupamvbiy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uyykxotufw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uzqkgsbczz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uzulclnqan.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uzvasozvpw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uzysiqomqx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"v-efaxverification.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200049034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"v1.novatic.vn"; content:"Host"; http_header; classtype:attempted-recon; sid:200049035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"v15sd.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200049036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"v1and1-ionos-info-2hyeo.ondigitalocean.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200049037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"v1claims.publicvm.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"v1e6qsq33uwkpwmzpxkn.nestify.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200049039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"v2-aave.arnadoor.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"v2-raydium.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"v2i-pancakeswap-finance.com.opiukalai.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"v5office365-owa6878.microsoftdynamics.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200049043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"v6fdj2.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200049044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"v6fyly.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200049045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"v7qji0.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200049046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaanitech.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaibvcksza.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicaceessaivcceaririccrasoria.viiessvaaciraoccivraoeaosonseosiren.2h4j6m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicaceessaivcceaririccrasoria.viiessvaaciraoccivraoeaosonseosiren.ewnywn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicaceessaivcceaririccrasoria.viiessvaaciraoccivraoeaosonseosiren.ghdbbh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicaceessaivcceaririccrasoria.viiessvaaciraoccivraoeaosonseosiren.lxpinv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicaceessaivcceaririccrasoria.viiessvaaciraoccivraoeaosonseosiren.pibfhc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicaceessaivcceaririccrasoria.viiessvaaciraoccivraoeaosonseosiren.ywcjpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicaceessaivcveaririacrsior.avisievseaaciccovsaoeaosesoeosiren.bgjjoi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicaceessaivcveaririacrsior.avisievseaaciccovsaoeaosesoeosiren.dlfylt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicaceessaivcveaririacrsior.avisievseaaciccovsaoeaosesoeosiren.kjtxzz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicaceessaivcveaririacrsior.avisievseaaciccovsaoeaosesoeosiren.nfygxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicaceessaivcveaririacrsior.avisievseaaciccovsaoeaosesoeosiren.nolj49.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicaceessaivcveaririacrsior.avisievseaaciccovsaoeaosesoeosiren.okywvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicaceessaivcveaririacrsior.avisievseaaciccovsaoeaosesoeosiren.pgofap.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicaceessaivcveaririacrsior.avisievseaaciccovsaoeaosesoeosiren.sgl2h3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicaceessaivcveaririccrasoria.viiessvaaciococvsaoeaosesseosiren.yjdcrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacessvaivcceaririacrsior.avisievsaaacircovsiaoeaosesseosiren.mugnqj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacessvaivcceaririacrsior.avisievsaaacircovsiaoeaosesseosiren.zynepg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacessvaivcceaririacrsior.avisievsaacciovosioeaosesonosiren.axuxfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacessvaivcceaririacrsior.avisievsaacciovosioeaosesonosiren.dqavbn.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200049067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacessvaivcceaririacrsior.avisievsaacciovosioeaosesonosiren.evrzoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacessvaivcceaririacrsior.avisievsaacciovosioeaosesonosiren.ewnywn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacessvaivcceaririacrsior.avisievsaacciovosioeaosesonosiren.mjexdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacessvaivcceaririacrsior.avisievsaacciovosioeaosesonosiren.ndiuxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacessvaivcceaririacrsior.avisievsaacciovosioeaosesonosiren.nhbccs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacessvaivcceaririacrsior.avisievsaacciovosioeaosesonosiren.syd58.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacessvaivcceaririacrsior.avisievsaacciovosioeaosesonosiren.xkye1.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacessvaivcceaririacrsior.avisievsaacciovosioeaosesonosiren.xtslink.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200049075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacessvaivcceaririscri.orvaisvieascaccivsoioeaosesonssiren.jlvnfj.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200049076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacessvaivcceaririscri.orvaisvieascaccivsoioeaosesonssiren.kbkwgp.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200049077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacessvaivcceaririscri.orvaisvieascaccivsoioeaosesonssiren.qzqnfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacessvaivcceaririscri.orvaisvieascaccivsoioeaosesonssiren.uinty.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacessvaivcceaririscri.orvaisvieaseaccivsoioeaosesonssiren.dlfylt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacessvaivcceaririscri.orvaisvieaseaccivsoioeaosesonssiren.gzj5016.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacessvaivcceaririscri.orvaisvieaseaccivsoioeaosesonssiren.oepcxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacessvaivcceaririscri.orvaisvieaseaccivsoioeaosesonssiren.qfi2r.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacessvaivcceaririscri.orvaisvieaseaccivsoioeaosesonssiren.zynepg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacevscaivcaeaririicr.voriasvaiecsvasciiooaoosesonseoren.0s0oy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacevscaivcaeaririicr.voriasvaiecsvasciiooaoosesonseoren.bohc7y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacevscaivcaeaririicr.voriasvaiecsvasciiooaoosesonseoren.eghloo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacevscaivcaeaririicr.voriasvaiecsvasciiooaoosesonseoren.ylibav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacevseaivccearirivcrcaorsai.vieissaacirvoeaicrciaoeaesonseosiren.aftnvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacevseaivccearirivcrcaorsai.vieissaacirvoeaicrciaoeaesonseosiren.evrzoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacevseaivccearirivcrcaorsai.vieissaacirvoeaicrciaoeaesonseosiren.o5irm9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacevseaivccearirivcrcaorsai.vieissaacirvoeaicrciaoeaesonseosiren.okywvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacevseaivcsearirivcrcaorsai.vieissavcioeoaccvraoeaosonseosiren.3488754.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacevseaivcsearirivcrcaorsai.vieissavcioeoaccvraoeaosonseosiren.ikipon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacevseaivcsearirivcrcaorsai.vieissavcioeoaccvraoeaosonseosiren.kulxbm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacevssaivcceaririccrasoria.viiessvaaciraoecivraoeaosonseosiren.6b3qxy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacevssaivcceaririccrasoria.viiessvaaciraoecivraoeaosonseosiren.ajarg5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacevssaivcceaririccrasoria.viiessvaaciraoecivraoeaosonseosiren.axuxfr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacevssaivcceaririccrasoria.viiessvaaciraoecivraoeaosonseosiren.jdftpe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacevssaivcceaririccrasoria.viiessvaaciraoecivraoeaosonseosiren.nfygxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacevssaivcceaririccrasoria.viiessvaaciraoecivraoeaosonseosiren.oinm8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacevssaivcceaririccrasoria.viiessvaaciraoecivraoeaosonseosiren.syd58.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacevssaivcceaririccrasoria.viiessvaaciraoecivraoeaosonseosiren.w10auy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacevssaivcceaririccrasoria.viiessvaaciraoecivraoeaosonseosiren.xkye1.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacevssaivcveaririccrasoria.viiessvaacioeocvsaoeaosesseosiren.phpump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacevssaivcveaririccrasoria.viiessvaacioeocvsaoeaosesseosiren.xbwkny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaicacevssaivcveaririccrasoria.viiessvaacioeocvsaoeaosesseosiren.ylibav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaiccairccrasoria.viiessvaaciraoccinivraoeaosesonseosiren.b1ufnm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaiccairccrasoria.viiessvaaciraoccinivraoeaosesonseosiren.cvhvjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaiccairccrasoria.viiessvaaciraoccinivraoeaosesonseosiren.evrzoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaiccairccrasoria.viiessvaaciraoccinivraoeaosesonseosiren.hizwrh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaiccairccrasoria.viiessvaaciraoccinivraoeaosesonseosiren.ikipon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaiccairccrasoria.viiessvaaciraoccinivraoeaosesonseosiren.jfiogo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaiccairccrasoria.viiessvaaciraoccinivraoeaosesonseosiren.lxpinv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaiccairccrasoria.viiessvaaciraoccinivraoeaosesonseosiren.mugnqj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaiccairccrasoria.viiessvaaciraoccinivraoeaosesonseosiren.qhnqwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaiccairccrasoria.viiessvaaciraoccinivraoeaosesonseosiren.ssjeoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaiccairccrasoria.viiessvaaciraoccinivraoeaosesonseosiren.ybvasb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaiccairccrasoria.viiessvaaciraoccinivraoeaosesonseosiren.yjdcrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaiccairccrasoria.viiessvaaciraoccinivraoeaosesonseosiren.yomghd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaicvairacrsior.avisievseaaciccovsinaoeaosesonseosiren.b1ufnm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaicvairacrsior.avisievseaaciccovsinaoeaosesonseosiren.ehlcnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaicvairacrsior.avisievseaaciccovsinaoeaosesonseosiren.ftibzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaicvairacrsior.avisievseaaciccovsinaoeaosesonseosiren.jdjubw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaicvairacrsior.avisievseaaciccovsinaoeaosesonseosiren.oepcxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaicvairacrsior.avisievseaaciccovsinaoeaosesonseosiren.ohkgcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaicvairacrsior.avisievseaaciccovsinaoeaosesonseosiren.rgxcoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaicvairacrsior.avisievseaaciccovsinaoeaosesonseosiren.zynepg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaicvairccrasoria.viiessvaaciococvinsaoeaosesonseosiren.2h4j6m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaicvairccrasoria.viiessvaaciococvinsaoeaosesonseosiren.abm9v2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaicvairccrasoria.viiessvaaciococvinsaoeaosesonseosiren.cjkin.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaicvairccrasoria.viiessvaaciococvinsaoeaosesonseosiren.cxiitv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaicvairccrasoria.viiessvaaciococvinsaoeaosesonseosiren.eghloo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaicvairccrasoria.viiessvaaciococvinsaoeaosesonseosiren.foj40c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaicvairccrasoria.viiessvaaciococvinsaoeaosesonseosiren.irllcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaicvairccrasoria.viiessvaaciococvinsaoeaosesonseosiren.mvigpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaicvairccrasoria.viiessvaaciococvinsaoeaosesonseosiren.ndiuxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaicvairccrasoria.viiessvaaciococvinsaoeaosesonseosiren.ohkgcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaicvairccrasoria.viiessvaaciococvinsaoeaosesonseosiren.sde4rq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccesaicvairccrasoria.viiessvaaciococvinsaoeaosesonseosiren.yohzhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaaacircovsiniaoeaosesonseosiren.07ygvz.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200049141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaaacircovsiniaoeaosesonseosiren.abm9v2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaaacircovsiniaoeaosesonseosiren.aftnvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaaacircovsiniaoeaosesonseosiren.cjkin.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaaacircovsiniaoeaosesonseosiren.dpdndt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaaacircovsiniaoeaosesonseosiren.eghloo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaaacircovsiniaoeaosesonseosiren.h80drs.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaaacircovsiniaoeaosesonseosiren.jnkapd.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200049148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaaacircovsiniaoeaosesonseosiren.kgetic.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaaacircovsiniaoeaosesonseosiren.ki6lhg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaaacircovsiniaoeaosesonseosiren.lsztbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaaacircovsiniaoeaosesonseosiren.mugnqj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaaacircovsiniaoeaosesonseosiren.mvigpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaaacircovsiniaoeaosesonseosiren.ndiuxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaaacircovsiniaoeaosesonseosiren.nzmoa6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaaacircovsiniaoeaosesonseosiren.pgwcxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaaacircovsiniaoeaosesonseosiren.pibfhc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaaacircovsiniaoeaosesonseosiren.qmzrde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaaacircovsiniaoeaosesonseosiren.svgsxn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaaacircovsiniaoeaosesonseosiren.tgylpk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaaacircovsiniaoeaosesonseosiren.tkdwso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaaacircovsiniaoeaosesonseosiren.xmdjsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaaacircovsiniaoeaosesonseosiren.zynepg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaacciovosiiaoeaosesonseosiren.77ma30.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaacciovosiiaoeaosesonseosiren.9gbi0w.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaacciovosiiaoeaosesonseosiren.ecabki.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaacciovosiiaoeaosesonseosiren.eghloo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaacciovosiiaoeaosesonseosiren.ewnywn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaacciovosiiaoeaosesonseosiren.foj40c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaacciovosiiaoeaosesonseosiren.gbbxdr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaacciovosiiaoeaosesonseosiren.ivkxun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaacciovosiiaoeaosesonseosiren.jdjubw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaacciovosiiaoeaosesonseosiren.kpdmbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaacciovosiiaoeaosesonseosiren.mugnqj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaacciovosiiaoeaosesonseosiren.nqrkii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaacciovosiiaoeaosesonseosiren.qfi2r.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaacciovosiiaoeaosesonseosiren.qlzblp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaacciovosiiaoeaosesonseosiren.suqluj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaacciovosiiaoeaosesonseosiren.trtszi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaacciovosiiaoeaosesonseosiren.uwmcgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairacrsior.avisievsaacciovosiiaoeaosesonseosiren.yjdcrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieascaccivsoioaoeaosesonseosiren.6ltgw.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieascaccivsoioaoeaosesonseosiren.b1ufnm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieascaccivsoioaoeaosesonseosiren.ewnywn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieascaccivsoioaoeaosesonseosiren.ikipon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieascaccivsoioaoeaosesonseosiren.irllcd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieascaccivsoioaoeaosesonseosiren.isgqms.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieascaccivsoioaoeaosesonseosiren.lsztbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieascaccivsoioaoeaosesonseosiren.lxpinv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieascaccivsoioaoeaosesonseosiren.mvigpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieascaccivsoioaoeaosesonseosiren.nqrkii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieascaccivsoioaoeaosesonseosiren.oinm8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieascaccivsoioaoeaosesonseosiren.suqluj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieascaccivsoioaoeaosesonseosiren.uinty.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieascaccivsoioaoeaosesonseosiren.viglwu.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200049195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieascaccivsoioaoeaosesonseosiren.ybvasb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieaseaccivsoioaoeaosesonseosiren.0h539n.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieaseaccivsoioaoeaosesonseosiren.4sji2i.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieaseaccivsoioaoeaosesonseosiren.8sy2b.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieaseaccivsoioaoeaosesonseosiren.ajiuwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieaseaccivsoioaoeaosesonseosiren.isgqms.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieaseaccivsoioaoeaosesonseosiren.kpdmbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieaseaccivsoioaoeaosesonseosiren.kvmh9r.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieaseaccivsoioaoeaosesonseosiren.lsztbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieaseaccivsoioaoeaosesonseosiren.mugnqj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieaseaccivsoioaoeaosesonseosiren.ndiuxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieaseaccivsoioaoeaosesonseosiren.nfygxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieaseaccivsoioaoeaosesonseosiren.nxuiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieaseaccivsoioaoeaosesonseosiren.pojxbh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieaseaccivsoioaoeaosesonseosiren.rxcevr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccsvaiccairscri.orvaisvieaseaccivsoioaoeaosesonseosiren.sgl2h3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvcaicaairicr.voriasvaiecsvasciiooaoeaosesonseosiren.ajiuwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvcaicaairicr.voriasvaiecsvasciiooaoeaosesonseosiren.bgjjoi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvcaicaairicr.voriasvaiecsvasciiooaoeaosesonseosiren.bohc7y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvcaicaairicr.voriasvaiecsvasciiooaoeaosesonseosiren.ewnywn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvcaicaairicr.voriasvaiecsvasciiooaoeaosesonseosiren.foj40c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvcaicaairicr.voriasvaiecsvasciiooaoeaosesonseosiren.kvmh9r.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvcaicaairicr.voriasvaiecsvasciiooaoeaosesonseosiren.metatv.website"; content:"Host"; http_header; classtype:attempted-recon; sid:200049218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvcaicaairicr.voriasvaiecsvasciiooaoeaosesonseosiren.nnicqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvcaicaairicr.voriasvaiecsvasciiooaoeaosesonseosiren.nqrkii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvcaicaairicr.voriasvaiecsvasciiooaoeaosesonseosiren.ohkgcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvcaicaairicr.voriasvaiecsvasciiooaoeaosesonseosiren.okywvf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvcaicaairicr.voriasvaiecsvasciiooaoeaosesonseosiren.qcjlrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvcaicaairicr.voriasvaiecsvasciiooaoeaosesonseosiren.qzqnfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvcaicaairicr.voriasvaiecsvasciiooaoeaosesonseosiren.rgxcoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvcaicaairicr.voriasvaiecsvasciiooaoeaosesonseosiren.rjfbqi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvcaicaairicr.voriasvaiecsvasciiooaoeaosesonseosiren.rqdauw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvcaicaairicr.voriasvaiecsvasciiooaoeaosesonseosiren.vcwpsa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvcaicaairicr.voriasvaiecsvasciiooaoeaosesonseosiren.yomghd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaiccairvcrcaorsai.vieissaacirvoeainicrciaoeaosesonseosiren.ajarg5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaiccairvcrcaorsai.vieissaacirvoeainicrciaoeaosesonseosiren.b1ufnm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaiccairvcrcaorsai.vieissaacirvoeainicrciaoeaosesonseosiren.bohc7y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaiccairvcrcaorsai.vieissaacirvoeainicrciaoeaosesonseosiren.cvhvjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaiccairvcrcaorsai.vieissaacirvoeainicrciaoeaosesonseosiren.dpdndt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaiccairvcrcaorsai.vieissaacirvoeainicrciaoeaosesonseosiren.elnvon.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200049235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaiccairvcrcaorsai.vieissaacirvoeainicrciaoeaosesonseosiren.evrzoe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaiccairvcrcaorsai.vieissaacirvoeainicrciaoeaosesonseosiren.fwpkjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaiccairvcrcaorsai.vieissaacirvoeainicrciaoeaosesonseosiren.ikipon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaiccairvcrcaorsai.vieissaacirvoeainicrciaoeaosesonseosiren.jdftpe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaiccairvcrcaorsai.vieissaacirvoeainicrciaoeaosesonseosiren.kfssyc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaiccairvcrcaorsai.vieissaacirvoeainicrciaoeaosesonseosiren.ktyebr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaiccairvcrcaorsai.vieissaacirvoeainicrciaoeaosesonseosiren.lsztbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaiccairvcrcaorsai.vieissaacirvoeainicrciaoeaosesonseosiren.mugnqj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaiccairvcrcaorsai.vieissaacirvoeainicrciaoeaosesonseosiren.mvigpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaiccairvcrcaorsai.vieissaacirvoeainicrciaoeaosesonseosiren.ndiuxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaiccairvcrcaorsai.vieissaacirvoeainicrciaoeaosesonseosiren.nolj49.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaiccairvcrcaorsai.vieissaacirvoeainicrciaoeaosesonseosiren.pibfhc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaiccairvcrcaorsai.vieissaacirvoeainicrciaoeaosesonseosiren.rjfbqi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaiccairvcrcaorsai.vieissaacirvoeainicrciaoeaosesonseosiren.suqluj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaiccairvcrcaorsai.vieissaacirvoeainicrciaoeaosesonseosiren.syzzhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaiccairvcrcaorsai.vieissaacirvoeainicrciaoeaosesonseosiren.vcwpsa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaiccairvcrcaorsai.vieissaacirvoeainicrciaoeaosesonseosiren.z4zj8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaicsairvcrcaorsai.vieissavcioeoacincvraoeaosesonseosiren.8sy2b.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaicsairvcrcaorsai.vieissavcioeoacincvraoeaosesonseosiren.ajiuwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaicsairvcrcaorsai.vieissavcioeoacincvraoeaosesonseosiren.cxiitv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaicsairvcrcaorsai.vieissavcioeoacincvraoeaosesonseosiren.jdjubw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaicsairvcrcaorsai.vieissavcioeoacincvraoeaosesonseosiren.mugnqj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaicsairvcrcaorsai.vieissavcioeoacincvraoeaosesonseosiren.ncligz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaicsairvcrcaorsai.vieissavcioeoacincvraoeaosesonseosiren.nnicqa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaicsairvcrcaorsai.vieissavcioeoacincvraoeaosesonseosiren.puwcxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaicsairvcrcaorsai.vieissavcioeoacincvraoeaosesonseosiren.qfi2r.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaicsairvcrcaorsai.vieissavcioeoacincvraoeaosesonseosiren.rxcevr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaicsairvcrcaorsai.vieissavcioeoacincvraoeaosesonseosiren.uvoeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccveaicsairvcrcaorsai.vieissavcioeoacincvraoeaosesonseosiren.w10auy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaiccairccrasoria.viiessvaaciraoecinivraoeaosesonseosiren.bwbril.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200049265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaiccairccrasoria.viiessvaaciraoecinivraoeaosesonseosiren.cyzemc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaiccairccrasoria.viiessvaaciraoecinivraoeaosesonseosiren.dkfrva.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaiccairccrasoria.viiessvaaciraoecinivraoeaosesonseosiren.ewnywn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaiccairccrasoria.viiessvaaciraoecinivraoeaosesonseosiren.itmoow.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaiccairccrasoria.viiessvaaciraoecinivraoeaosesonseosiren.ndiuxo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaiccairccrasoria.viiessvaaciraoecinivraoeaosesonseosiren.nhbccs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaiccairccrasoria.viiessvaaciraoecinivraoeaosesonseosiren.ohkgcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaiccairccrasoria.viiessvaaciraoecinivraoeaosesonseosiren.qfi2r.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaiccairccrasoria.viiessvaaciraoecinivraoeaosesonseosiren.zhhula.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaicvairccrasoria.viiessvaacioeocvinsaoeaosesonseosiren.0h539n.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaicvairccrasoria.viiessvaacioeocvinsaoeaosesonseosiren.0s0oy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaicvairccrasoria.viiessvaacioeocvinsaoeaosesonseosiren.3488754.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaicvairccrasoria.viiessvaacioeocvinsaoeaosesonseosiren.8sy2b.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaicvairccrasoria.viiessvaacioeocvinsaoeaosesonseosiren.adorui.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaicvairccrasoria.viiessvaacioeocvinsaoeaosesonseosiren.b9asf8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaicvairccrasoria.viiessvaacioeocvinsaoeaosesonseosiren.cyzemc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaicvairccrasoria.viiessvaacioeocvinsaoeaosesonseosiren.foj40c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaicvairccrasoria.viiessvaacioeocvinsaoeaosesonseosiren.hggluj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaicvairccrasoria.viiessvaacioeocvinsaoeaosesonseosiren.jfiogo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaicvairccrasoria.viiessvaacioeocvinsaoeaosesonseosiren.oinm8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaicvairccrasoria.viiessvaacioeocvinsaoeaosesonseosiren.phpump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaicvairccrasoria.viiessvaacioeocvinsaoeaosesonseosiren.qhnqwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaicvairccrasoria.viiessvaacioeocvinsaoeaosesonseosiren.svgsxn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaicvairccrasoria.viiessvaacioeocvinsaoeaosesonseosiren.syzzhh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaicvairccrasoria.viiessvaacioeocvinsaoeaosesonseosiren.uinty.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaicvairccrasoria.viiessvaacioeocvinsaoeaosesonseosiren.vcwpsa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaicvairccrasoria.viiessvaacioeocvinsaoeaosesonseosiren.ylibav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaicvairccrasoria.viiessvaacioeocvinsaoeaosesonseosiren.ywcjpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiccvsaicvairccrasoria.viiessvaacioeocvinsaoeaosesonseosiren.yzkznk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaidevisago.siteprofissional.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiscsecicaacarirsio.arvisevsaacrcooavsnaroeonsnaosesonseosiren.odiuwn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaiscsecicaacsriri.ovarisveascccvsooaaoeorsnmaosesonseosiren.ohkgcg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"valenciaoptometry.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"valhalla-mint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"valhalla-nft.cloud"; content:"Host"; http_header; classtype:attempted-recon; sid:200049300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"valid.dosor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"validacioneslemonchiffonaquaoctalbancolombia22.redvirtual22.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200049302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"validacionpichincha.odoo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"validaritaupy.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200049304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"validatemailserver10.mailerror1.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200049305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"validedata--ficohsa2022.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200049306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"valkonp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vallianiaerodetail.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"valuekidz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vandam-dot-azure-cloudshare.uk.r.appspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vanillagift.club"; content:"Host"; http_header; classtype:attempted-recon; sid:200049311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vanillagift.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaniqueenstudio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vapestation.pt"; content:"Host"; http_header; classtype:attempted-recon; sid:200049314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"varundeep.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vasigo.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200049316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vast-sea-77689.herokuapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vatio.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200049318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vault-connection.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200049319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaultfix.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200049320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaultgateway.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200049321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaxfg5.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200049322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaxoc1.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200049323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vayjtgvhov.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaynersportspass.mint-airdrop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaynersportspass.nfts-mint.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vb86idjjzhx.typeform.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vbdfg.w3eu8w42.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200049328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vbugquxpdu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vbwfptusan.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vbxisnusil.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vc-107510.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vcajaspiura.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vcapumkihk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vcfrofqxic.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vcgnfqwyim.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vcncbedrco.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vdfbf.75237.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200049338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vdff.ansrmyy.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200049339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vdzdtv0w41.blob.core.windows.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200049340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veecon.premint-now.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vehdryguhi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veicesevaccciracrsior.avisievsaaacircovsiniaoeosnmer.yphurc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.abluwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.awsgn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.dkmimw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.epwnsr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.nr5kfh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.pxzjwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.qexccc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.usivdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.vrbvro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.5uzz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.eaelbi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.eucvbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.fhqemq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.gzmvuo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.ioxsho.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200049358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.lgwjlm.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200049359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.mingrunfuzhuang05.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.pqdxev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.zxj6002.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.demtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.djulad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.ejvocy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.exqkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.fhqemq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.gdmdxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.jubsfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.kbqnmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.mxeanv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.nlujo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.oipful.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.zrbfzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.abluwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.demtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.eucvbc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.gdmdxy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.jryuds.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.pxnctk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.vrbvro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.xqpwkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.xwitwq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.ytwbnq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.zmlyhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.doenfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.gzmvuo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.hpbzkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.nhewlh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.nphgoc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.oipful.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.rjbvwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.tgmqlg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.usivdv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.vrbvro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.xwitwq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.bsnpag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.demtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.elhicw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.epwnsr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.hixcny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.royjjy.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200049402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.vnbbks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.xaexmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.bvdadv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.dgqqxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.hpbzkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.5sime.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.abluwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.dfdnsx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.fhqemq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.glhdpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.gntozh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.gyzt809.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.hpbzkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.ilfbdb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.saveyr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.xzlnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.yyzded.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.6mmfl.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.b4eqf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.epwnsr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.exqkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.hhxulg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.jryuds.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.jubsfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.kutlzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.kwoneq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.pqdxev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.pxzjwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.vrbvro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.yifpgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.3p1yb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.abluwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.exqkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.pysitg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.tgmqlg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.wcpjfd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.zrbfzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.1112458.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.bvdadv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.exqkjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.kutlzl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.neidee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.nlujo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.oiknia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.pugxbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.rvpepb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.xzlnlm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.4-4-j-nbbn-ct.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.5577778.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.dgqqxx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.epwnsr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.fvkhnr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.gzmvuo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.jubsfg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.pugxbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.qexccc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.rhwdsq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.tikoig.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.voadax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vektrofoods.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"velcrowforward.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"velosi-ksa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vengefulgroundedstartups--sugerencia.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200049465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veoveo.com.vn"; content:"Host"; http_header; classtype:attempted-recon; sid:200049466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ver-2ji.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200049467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veraluzine.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veranope.wwwaz1-ss44.a2hosted.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verdabelo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veredicto63.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200049471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verfisecupass.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200049472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verfisecupasses.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vergueau.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200049474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verif-idce001.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verif-idce001.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200049476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verif-idce004.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verif-idce004.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200049478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verif-idce005.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verif-idce005.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200049480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verif-idce006.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verif-idce006.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200049482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verif-projet2002.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verif-projet2002.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200049484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verifica.3-67-196-14.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verificaallert-bper.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verificaciondesistemaelectronicobccr.webnode.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200049487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verificadati-bper.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verificadinamica.upforbank.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200049489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verificaportaleaccesso.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verificarestrizione.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verificasospettamobile.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verification-roundcube.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verification-roundcube.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200049494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verification.fb-page.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200049495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verificationmessage.blob.core.windows.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200049496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verificationmetamask.rf.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200049497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verified.sc0tia.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200049498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verifiedownlpro.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200049499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verifiercerticodepl.mom"; content:"Host"; http_header; classtype:attempted-recon; sid:200049500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verifiikasiifacebok.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verifikasi-akun-anda0011.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verifikasi-akun-anda13.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verifikasi-pengamanan-akun.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verifikasi-safety-akun.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verifikasiakunanda1.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verify-email-e8a07.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verify-email-e8a07.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200049508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verify-log.botanic-essence.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verify.ath.cx"; content:"Host"; http_header; classtype:attempted-recon; sid:200049510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verifybtinternet-106795.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200049511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verifydevice-uk.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verifydevice-uk.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200049513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verifyid99847736628293000044.42web.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200049514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verifymygiftcard.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verifynow.my.to"; content:"Host"; http_header; classtype:attempted-recon; sid:200049516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verifyprocess787-loggidd8956902.rstoreyouraccou.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200049517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veriifiikasi-akun-anda002.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verivikasipembloki.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verkinly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verolionline.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"versarehoteis.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verskmyxcm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"versuomc.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"versuomc.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200049525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vertificatione.vertificationi.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200049526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veru.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200049527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veryfidate503.infodate.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200049528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veslone.noelenama.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200049529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vetrafurniture.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vetrilsoftware.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vew3rhngbo098ier50thg-0wherg0-fbhwe0-fhg0-ehffe.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vfraqvhpne.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vgicintvpb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vgix.i-india.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200049535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vhee.o6cc.cfgliders.com."; content:"Host"; http_header; classtype:attempted-recon; sid:200049536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vhvvhuglkd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vhwns.needile.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vhytzbkqlh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200049539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.2sfjp1.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200049540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.4vul30.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.5xvtv1.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.aalme.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.dzerdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.eoamsf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.fjmcxh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.gmgjkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.gulbul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.gyzt802.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.gzj5012.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.gzj7009.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.hwzwtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.hxsbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.ia4myc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.iuruyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.jrignr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.k43e5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.nljqmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.prthkn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.rolling37.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.rsnhxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.sblr001.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.tbktyg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.txqqzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaeeevesvcsceei.viacvacersvoerrsai.zwddtp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaveesevcesei.vivcacsveersaoir.1345578.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaveesevcesei.vivcacsveersaoir.3667884.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaveesevcesei.vivcacsveersaoir.4vul30.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaveesevcesei.vivcacsveersaoir.ctokrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaveesevcesei.vivcacsveersaoir.cyqggi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaveesevcesei.vivcacsveersaoir.eaoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaveesevcesei.vivcacsveersaoir.ebmedia.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaveesevcesei.vivcacsveersaoir.hxsbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaveesevcesei.vivcacsveersaoir.ijowbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaveesevcesei.vivcacsveersaoir.jhuejd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaveesevcesei.vivcacsveersaoir.khbsvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaveesevcesei.vivcacsveersaoir.kqstye.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaveesevcesei.vivcacsveersaoir.kxdnjf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaveesevcesei.vivcacsveersaoir.lurojy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaveesevcesei.vivcacsveersaoir.mbruzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaveesevcesei.vivcacsveersaoir.orhznj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaveesevcesei.vivcacsveersaoir.prthkn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaveesevcesei.vivcacsveersaoir.rewvsa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaveesevcesei.vivcacsveersaoir.sblr005.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaveesevcesei.vivcacsveersaoir.slbggp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaveesevcesei.vivcacsveersaoir.tzwpfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaveesevcesei.vivcacsveersaoir.umkykk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaveesevcesei.vivcacsveersaoir.utshxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaaveesevcesei.vivcacsveersaoir.verse6.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesavceei.vivcsvcesairaser.aalme.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesavceei.vivcsvcesairaser.bokqmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesavceei.vivcsvcesairaser.cyqggi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesavceei.vivcsvcesairaser.eoamsf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesavceei.vivcsvcesairaser.fph186.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesavceei.vivcsvcesairaser.gulbul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesavceei.vivcsvcesairaser.hwzwtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesavceei.vivcsvcesairaser.ioxzyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesavceei.vivcsvcesairaser.jdqnac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesavceei.vivcsvcesairaser.jrignr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesavceei.vivcsvcesairaser.jxvstx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesavceei.vivcsvcesairaser.kqstye.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesavceei.vivcsvcesairaser.lgn09m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesavceei.vivcsvcesairaser.mzbqid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesavceei.vivcsvcesairaser.nfffte.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesavceei.vivcsvcesairaser.ohmatb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesavceei.vivcsvcesairaser.ptohrn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesavceei.vivcsvcesairaser.qogdsq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesavceei.vivcsvcesairaser.rbqvre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesavceei.vivcsvcesairaser.rsnhxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesavceei.vivcsvcesairaser.txbrht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesavceei.vivcsvcesairaser.udhdcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesavceei.vivcsvcesairaser.vr0rx.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesvcceei.vivacscversrai.2ebz23.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesvcceei.vivacscversrai.2fx3p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesvcceei.vivacscversrai.cjxmoz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesvcceei.vivacscversrai.ebqzws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesvcceei.vivacscversrai.gulbul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesvcceei.vivacscversrai.iiyqmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesvcceei.vivacscversrai.kqstye.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesvcceei.vivacscversrai.lcacsa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesvcceei.vivacscversrai.lnuxfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesvcceei.vivacscversrai.mzbqid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesvcceei.vivacscversrai.nfffte.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesvcceei.vivacscversrai.onazqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesvcceei.vivacscversrai.rsnhxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesvcceei.vivacscversrai.tgytgc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesvcceei.vivacscversrai.verse6.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesvcceei.vivacscversrai.vspuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesvcceei.vivacscversrai.wcidvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesvcceei.vivacscversrai.zlsrwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaeveesvcceei.vivacscversrai.znegsr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavceesevcesei.visvacsveerasoir.4vul30.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavceesevcesei.visvacsveerasoir.7wqxmz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavceesevcesei.visvacsveerasoir.axcgpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavceesevcesei.visvacsveerasoir.cdfsiejkf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavceesevcesei.visvacsveerasoir.ctokrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavceesevcesei.visvacsveerasoir.cxusvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavceesevcesei.visvacsveerasoir.dkvvuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavceesevcesei.visvacsveerasoir.ebmedia.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavceesevcesei.visvacsveerasoir.fjmcxh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavceesevcesei.visvacsveerasoir.hxsbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavceesevcesei.visvacsveerasoir.jrignr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavceesevcesei.visvacsveerasoir.njhpgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavceesevcesei.visvacsveerasoir.opyxhy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavceesevcesei.visvacsveerasoir.qqwfas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavceesevcesei.visvacsveerasoir.sblr009.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavceesevcesei.visvacsveerasoir.sd2ed.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavceesevcesei.visvacsveerasoir.txbrht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavceesevcesei.visvacsveerasoir.uabtme.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavceesevcesei.visvacsveerasoir.umkykk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavceesevcesei.visvacsveerasoir.voezvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavceesevcesei.visvacsveerasoir.vtcgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavceesevcesei.visvacsveerasoir.wcidvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavceesevcesei.visvacsveerasoir.zxj4025.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.2ebz23.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.3667884.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.bokqmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.cjsuye.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.dtyweh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.ebmedia.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.evcinc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.fhalul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.hvjagp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.kwlzjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.mbruzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.mzbqid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.noqaub.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.orhznj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.ouomrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.prthkn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.sblr007.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.sl86as.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.uabtme.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.umkykk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.v8vbdk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.vkzvur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.voezvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.zgzemr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavseevceei.vivcsvescair.2uz8yl.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavseevceei.vivcsvescair.3997884.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavseevceei.vivcsvescair.cxusvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavseevceei.vivcsvescair.gzj7009.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavseevceei.vivcsvescair.hwzwtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavseevceei.vivcsvescair.ijowbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavseevceei.vivcsvescair.ioyatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavseevceei.vivcsvescair.jdqnac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavseevceei.vivcsvescair.mzrkkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavseevceei.vivcsvescair.ozmubm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavseevceei.vivcsvescair.ptohrn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavseevceei.vivcsvescair.ruesxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavseevceei.vivcsvescair.shanchu02.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200049691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavseevceei.vivcsvescair.umkykk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaavseevceei.vivcsvescair.znegsr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.2ebz23.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.2fx3p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.7wqxmz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.ajkqym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.axcgpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.cjsuye.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.cyqggi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.dtyweh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.gulbul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.gzj5012.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.hgpqys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.hvjagp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.hwzwtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.ioxzyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.jxvstx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.klvjnr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.lgn09m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.metabrain.group"; content:"Host"; http_header; classtype:attempted-recon; sid:200049711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.mfts.ltd"; content:"Host"; http_header; classtype:attempted-recon; sid:200049712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.mwsxcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.nbdgwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.nfffte.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.ohmatb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.qqwfas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.sgrxpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.syzyzz.ltd"; content:"Host"; http_header; classtype:attempted-recon; sid:200049719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.txbrht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.utshxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaeavesvcsceei.viavacesvoerrcsaias.zwddtp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavasevcesei.vivcasveesacoiras.2uz8yl.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavasevcesei.vivcasveesacoiras.5xvtv1.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavasevcesei.vivcasveesacoiras.6j449d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavasevcesei.vivcasveesacoiras.bokqmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavasevcesei.vivcasveesacoiras.cdsqma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavasevcesei.vivcasveesacoiras.gzj5012.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavasevcesei.vivcasveesacoiras.hgpqys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavasevcesei.vivcasveesacoiras.hvjagp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavasevcesei.vivcasveesacoiras.ioyatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavasevcesei.vivcasveesacoiras.j68gux.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavasevcesei.vivcasveesacoiras.metabrain.group"; content:"Host"; http_header; classtype:attempted-recon; sid:200049733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavasevcesei.vivcasveesacoiras.mfts.ltd"; content:"Host"; http_header; classtype:attempted-recon; sid:200049734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavasevcesei.vivcasveesacoiras.mwsxcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavasevcesei.vivcasveesacoiras.njhpgs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavasevcesei.vivcasveesacoiras.opyxhy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavasevcesei.vivcasveesacoiras.orhznj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavasevcesei.vivcasveesacoiras.piicje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavasevcesei.vivcasveesacoiras.ppvlmr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavasevcesei.vivcasveesacoiras.qogdsq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavasevcesei.vivcasveesacoiras.rataxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavasevcesei.vivcasveesacoiras.ruesxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavasevcesei.vivcasveesacoiras.sblr001.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavasevcesei.vivcasveesacoiras.v8vbdk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavasevcesei.vivcasveesacoiras.voezvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.4-4-j-tyu-uyt.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.anl7ya.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.axrdkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.cjxmoz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.dtyweh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.dzerdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.eaoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.gmgjkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.iiyqmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.jrignr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.kwlzjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.lcacsa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.lmhau8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.metabrain.group"; content:"Host"; http_header; classtype:attempted-recon; sid:200049760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.mzrkkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.ncatge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.osnolv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.q04nkf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.qogdsq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.rataxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.rbqvre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.realme.cool"; content:"Host"; http_header; classtype:attempted-recon; sid:200049768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.sgrxpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.slbggp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.txqqzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.voezvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.zgzemr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavcseevceei.visvsveacsir.znegsr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.6j449d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.cxusvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.dzerdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.ebqzws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.eoamsf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.gmgjkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.gxemzv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.gyzt802.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.iiyqmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.jdqnac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.jrignr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.kxdnjf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.mivflz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.mzrkkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.nfffte.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.noqaub.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.q04nkf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.rataxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.realme.cool"; content:"Host"; http_header; classtype:attempted-recon; sid:200049793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.ruesxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.sblr005.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.slbggp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.syzyzz.ltd"; content:"Host"; http_header; classtype:attempted-recon; sid:200049797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.tbktyg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.tdenvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.tgytgc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.vr0rx.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.wcidvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.zgzemr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesavceei.visvsvceasiraser.zlsrwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.4-4-j-tyu-uyt.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.anl7ya.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.axcgpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.axrdkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.bokqmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.cjsuye.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.dtyweh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.dxsahh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.ebqzws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.ekqclm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.fph186.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.ia4myc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.iiyqmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.jhuejd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.k43e5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.klvjnr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.mbruzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.mfts.ltd"; content:"Host"; http_header; classtype:attempted-recon; sid:200049822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.ncatge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.noqaub.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.q04nkf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.qogdsq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.ruesxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.sblr007.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.sd2ed.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.sgrxpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.tdenvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.tgytgc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.txqqzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.wcidvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveceesvcceei.visavscverarsi.zgzemr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveseevacei.vivsvesicaserr.6j449d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveseevacei.vivsvesicaserr.7wqxmz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveseevacei.vivsvesicaserr.bokqmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveseevacei.vivsvesicaserr.fhalul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveseevacei.vivsvesicaserr.gzj5012.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveseevacei.vivsvesicaserr.hxsbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveseevacei.vivsvesicaserr.jhuejd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveseevacei.vivsvesicaserr.jrignr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveseevacei.vivsvesicaserr.k43e5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveseevacei.vivsvesicaserr.khbsvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveseevacei.vivsvesicaserr.kqstye.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveseevacei.vivsvesicaserr.kxdnjf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveseevacei.vivsvesicaserr.lcacsa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveseevacei.vivsvesicaserr.osnolv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveseevacei.vivsvesicaserr.ouomrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveseevacei.vivsvesicaserr.ptohrn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveseevacei.vivsvesicaserr.sblr009.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaaveseevacei.vivsvesicaserr.shanchuta01.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200049853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.1345578.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.2uz8yl.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.2z6dpf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.4-4-j-tyu-uyt.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.5xvtv1.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.7wqxmz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.aamuhb.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200049860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.ajkqym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.axcgpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.cdsqma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.cyqggi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.dkvvuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.evcinc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.gmgjkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.gyzt802.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.iddr8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.lmhau8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.mwsxcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.nbdgwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.nljqmk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.noqaub.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.opyxhy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.ozmubm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.pctmqj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.qmjded.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.rewvsa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.ruesxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.tgytgc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.tvvghs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.uabtme.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.vkzvur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaavsveecei.vivsvesicr.vr0rx.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacredi.ailoscoop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200049886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.2z6dpf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.6nc5p5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.7wqxmz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.axcgpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.bokqmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.cxusvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.ebmedia.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.ebqzws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.eoamsf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.gmgjkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.gzj7001.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.iuruyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.kxdnjf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.mwsxcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.mzbqid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.nbdgwr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.ozmubm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.ptohrn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.qqwfas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.rataxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.ruesxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.sblr001.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.sblr005.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.sd2ed.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.tbktyg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.tmwhe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.txqqzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.tzwpfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.ykjclz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viacsevcesei.visvasvceeaso.zlsrwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.botom1.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.ctokrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.dgmeec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.eaoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.fjmcxh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.gulbul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.hgpqys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.ia4myc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.ioxzyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.kxdnjf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.lcacsa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.mbruzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.noqaub.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.onazqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.q04nkf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.qlxmyy666.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.qogdsq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.ruesxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.sgrxpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.syzyzz.ltd"; content:"Host"; http_header; classtype:attempted-recon; sid:200049936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.tmwhe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.txqqzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.vkzvur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.vspuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.vtcgqk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.xgyaef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaecesvcsceei.viasavesvcoerra.yjefsg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseccai.vivccvcveaeii.aggfpx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseccai.vivccvcveaeii.dnytdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseccai.vivccvcveaeii.eovlfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseccai.vivccvcveaeii.feipyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseccai.vivccvcveaeii.fqeitb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseccai.vivccvcveaeii.gffhis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseccai.vivccvcveaeii.gimbjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseccai.vivccvcveaeii.gpcaia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseccai.vivccvcveaeii.hyicnl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseccai.vivccvcveaeii.jsbwdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseccai.vivccvcveaeii.kjpzvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseccai.vivccvcveaeii.kzfgvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseccai.vivccvcveaeii.qzswkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseccai.vivccvcveaeii.riviwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseccai.vivccvcveaeii.uclutx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseccai.vivccvcveaeii.vuonno.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseccai.vivccvcveaeii.wkzsav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseccai.vivccvcveaeii.yuqfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseceeai.vivccvceaaaeii.aggfpx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseceeai.vivccvceaaaeii.angskq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseceeai.vivccvceaaaeii.dgcxkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseceeai.vivccvceaaaeii.hviljm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseceeai.vivccvceaaaeii.jfysaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseceeai.vivccvceaaaeii.jwluwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseceeai.vivccvceaaaeii.ktmuae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseceeai.vivccvceaaaeii.nbmlys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseceeai.vivccvceaaaeii.rtegfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseceeai.vivccvceaaaeii.rzvflv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseceeai.vivccvceaaaeii.tjqiry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaeevseceeai.vivccvceaaaeii.wszouq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevasvcceei.vivacsvercsaias.1345578.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevasvcceei.vivacsvercsaias.4vul30.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevasvcceei.vivacsvercsaias.botom1.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevasvcceei.vivacsvercsaias.cdsqma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevasvcceei.vivacsvercsaias.dtyweh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevasvcceei.vivacsvercsaias.gulbul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevasvcceei.vivacsvercsaias.hcoklg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevasvcceei.vivacsvercsaias.ia4myc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevasvcceei.vivacsvercsaias.ioxzyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevasvcceei.vivacsvercsaias.iuruyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevasvcceei.vivacsvercsaias.jxvstx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevasvcceei.vivacsvercsaias.lnuxfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevasvcceei.vivacsvercsaias.mzbqid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevasvcceei.vivacsvercsaias.pctmqj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevasvcceei.vivacsvercsaias.q04nkf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevasvcceei.vivacsvercsaias.qogdsq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevasvcceei.vivacsvercsaias.qqwfas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevasvcceei.vivacsvercsaias.rataxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevasvcceei.vivacsvercsaias.rbqvre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevasvcceei.vivacsvercsaias.sblr007.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevasvcceei.vivacsvercsaias.sblr009.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200049994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevasvcceei.vivacsvercsaias.yjefsg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevesvcsceei.viavacesvcoerrs.anl7ya.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200049996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevesvcsceei.viavacesvcoerrs.ctokrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevesvcsceei.viavacesvcoerrs.cxusvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevesvcsceei.viavacesvcoerrs.evcinc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200049999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevesvcsceei.viavacesvcoerrs.fjmcxh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevesvcsceei.viavacesvcoerrs.ioyatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevesvcsceei.viavacesvcoerrs.k43e5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevesvcsceei.viavacesvcoerrs.khbsvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevesvcsceei.viavacesvcoerrs.kqstye.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevesvcsceei.viavacesvcoerrs.lnuxfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevesvcsceei.viavacesvcoerrs.mivflz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevesvcsceei.viavacesvcoerrs.noqaub.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevesvcsceei.viavacesvcoerrs.ouomrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevesvcsceei.viavacesvcoerrs.piicje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevesvcsceei.viavacesvcoerrs.rewvsa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevesvcsceei.viavacesvcoerrs.sblr005.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200050011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevesvcsceei.viavacesvcoerrs.txbrht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevesvcsceei.viavacesvcoerrs.vxcgax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevsecai.vivcvcvaei.aovskd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevsecai.vivcvcvaei.dgcxkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevsecai.vivcvcvaei.dnytdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevsecai.vivcvcvaei.feipyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevsecai.vivcvcvaei.fihcwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevsecai.vivcvcvaei.gfmdsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevsecai.vivcvcvaei.gpcaia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevsecai.vivcvcvaei.guskko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevsecai.vivcvcvaei.hyicnl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevsecai.vivcvcvaei.jfysaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevsecai.vivcvcvaei.kbxlax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevsecai.vivcvcvaei.mpenym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevsecai.vivcvcvaei.mvvbrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevsecai.vivcvcvaei.nbmlys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevsecai.vivcvcvaei.qbpihx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevsecai.vivcvcvaei.shxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevsecai.vivcvcvaei.tjqiry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevsecai.vivcvcvaei.tvwump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevsecai.vivcvcvaei.uclutx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevsecai.vivcvcvaei.vuonno.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevsecai.vivcvcvaei.wkzsav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevseeeai.vivcvcaaaei.baishengwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevseeeai.vivcvcaaaei.bujzts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevseeeai.vivcvcaaaei.doozbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevseeeai.vivcvcaaaei.fihcwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevseeeai.vivcvcaaaei.fqeitb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevseeeai.vivcvcaaaei.fzctif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevseeeai.vivcvcaaaei.idolba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevseeeai.vivcvcaaaei.iysyln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevseeeai.vivcvcaaaei.ktmuae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevseeeai.vivcvcaaaei.pxibhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevseeeai.vivcvcaaaei.qzswkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevseeeai.vivcvcaaaei.rtegfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevseeeai.vivcvcaaaei.tndado.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevseeeai.vivcvcaaaei.tvwump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevseeeai.vivcvcaaaei.wseqrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevseeeai.vivcvcaaaei.xqajbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevseeeai.vivcvcaaaei.yjzswj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevseeeai.vivcvcaaaei.yplahe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaevseeeai.vivcvcaaaei.yuqfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaecai.vicvcvecveaeii.aempvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaecai.vicvcvecveaeii.aggfpx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaecai.vicvcvecveaeii.baishengwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaecai.vicvcvecveaeii.chbogc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaecai.vicvcvecveaeii.chipel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaecai.vicvcvecveaeii.chvwrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaecai.vicvcvecveaeii.mpenym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaecai.vicvcvecveaeii.stkfns.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaecai.vicvcvecveaeii.wkzsav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaecai.vicvcvecveaeii.xdfglk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaecai.vicvcvecveaeii.yjzswj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaeeeai.vcivcevceaaaeii.angskq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaeeeai.vcivcevceaaaeii.bagatn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaeeeai.vcivcevceaaaeii.byvvoi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaeeeai.vcivcevceaaaeii.fqeitb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaeeeai.vcivcevceaaaeii.gdxsmh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaeeeai.vcivcevceaaaeii.gimbjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaeeeai.vcivcevceaaaeii.hviljm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaeeeai.vcivcevceaaaeii.kbxlax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaeeeai.vcivcevceaaaeii.kjpzvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaeeeai.vcivcevceaaaeii.ktmuae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaeeeai.vcivcevceaaaeii.mwdkgc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaeeeai.vcivcevceaaaeii.rtegfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaeeeai.vcivcevceaaaeii.rzvflv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaeeeai.vcivcevceaaaeii.slruwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaeeeai.vcivcevceaaaeii.xdfglk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaeeeai.vcivcevceaaaeii.ydfcqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaieevscaeeeai.vcivcevceaaaeii.yjzswj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaeeesvi.cvsceveeaaavis.derttj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaeeesvi.cvsceveeaaavis.eabboz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaeeesvi.cvsceveeaaavis.gffhis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaeeesvi.cvsceveeaaavis.hyicnl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaeeesvi.cvsceveeaaavis.iyazyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaeeesvi.cvsceveeaaavis.kbxlax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaeeesvi.cvsceveeaaavis.kjpzvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaeeesvi.cvsceveeaaavis.kzfgvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaeeesvi.cvsceveeaaavis.qqoehr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaeeesvi.cvsceveeaaavis.qzswkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaeeesvi.cvsceveeaaavis.shxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaeeesvi.cvsceveeaaavis.sjfmje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaeeesvi.cvsceveeaaavis.sllzad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaeeesvi.cvsceveeaaavis.slruwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaeeesvi.cvsceveeaaavis.vuonno.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaeeesvi.cvsceveeaaavis.xdrsxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaeeesvi.cvsceveeaaavis.xlrepg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaevsvi.vcscveeveavsi.derttj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaevsvi.vcscveeveavsi.fwggea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaevsvi.vcscveeveavsi.gymkux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaevsvi.vcscveeveavsi.iysyln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaevsvi.vcscveeveavsi.jfysaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaevsvi.vcscveeveavsi.mpenym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaevsvi.vcscveeveavsi.qzswkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaevsvi.vcscveeveavsi.vuonno.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaevsvi.vcscveeveavsi.xdfglk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaiesvccaevsvi.vcscveeveavsi.ydfcqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaecai.vivcvcveaei.aycbpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaecai.vivcvcveaei.bujzts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaecai.vivcvcveaei.chvwrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaecai.vivcvcveaei.fwggea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaecai.vivcvcveaei.fzctif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaecai.vivcvcveaei.gjdfei.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaecai.vivcvcveaei.hviljm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaecai.vivcvcveaei.idolba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaecai.vivcvcveaei.jgyxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaecai.vivcvcveaei.ktmuae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaecai.vivcvcveaei.mvvbrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaecai.vivcvcveaei.nbmlys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaecai.vivcvcveaei.riviwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaecai.vivcvcveaei.slruwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaecai.vivcvcveaei.uclutx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaecai.vivcvcveaei.xqajbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaecai.vivcvcveaei.ydfcqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaecai.vivcvcveaei.yplahe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaeeeai.vivcvceaaaei.aempvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaeeeai.vivcvceaaaei.angskq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaeeeai.vivcvceaaaei.baishengwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaeeeai.vivcvceaaaei.byvvoi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaeeeai.vivcvceaaaei.chipel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaeeeai.vivcvceaaaei.eovlfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaeeeai.vivcvceaaaei.gffhis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaeeeai.vivcvceaaaei.gimbjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaeeeai.vivcvceaaaei.giyarc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaeeeai.vivcvceaaaei.ildcfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaeeeai.vivcvceaaaei.iyazyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaeeeai.vivcvceaaaei.jgyxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaeeeai.vivcvceaaaei.jwluwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaeeeai.vivcvceaaaei.rtegfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaievsaeeeai.vivcvceaaaei.slruwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaeeesvi.vscveeaaavs.angskq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaeeesvi.vscveeaaavs.crgcfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaeeesvi.vscveeaaavs.dgcxkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaeeesvi.vscveeaaavs.doozbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaeeesvi.vscveeaaavs.gfmdsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaeeesvi.vscveeaaavs.gjdfei.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaeeesvi.vscveeaaavs.guskko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaeeesvi.vscveeaaavs.jgyxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaeeesvi.vscveeaaavs.ktmuae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaeeesvi.vscveeaaavs.nbmlys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaeeesvi.vscveeaaavs.oozlqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaeeesvi.vscveeaaavs.qbpihx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaeeesvi.vscveeaaavs.qzswkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaeeesvi.vscveeaaavs.raoxxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaeeesvi.vscveeaaavs.rzvflv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaeeesvi.vscveeaaavs.tjqiry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaeeesvi.vscveeaaavs.uclutx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaeeesvi.vscveeaaavs.wkzsav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaeeesvi.vscveeaaavs.xaxoso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaeeesvi.vscveeaaavs.xdfglk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaeeesvi.vscveeaaavs.yplahe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaevsvi.vscveveavs.bagatn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaevsvi.vscveveavs.chbogc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaevsvi.vscveveavs.chvwrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaevsvi.vscveveavs.doozbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaevsvi.vscveveavs.fzctif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaevsvi.vscveveavs.iysyln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaevsvi.vscveveavs.jfysaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaevsvi.vscveveavs.pxibhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaevsvi.vscveveavs.qzswkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaevsvi.vscveveavs.ruqdog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaevsvi.vscveveavs.tndado.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaisvcaevsvi.vscveveavs.uclutx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viajepornieve.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200050175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vialbcp-pe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200050176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevceceesvi.vsccveeaaavsi.aempvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevceceesvi.vsccveeaaavsi.baishengwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevceceesvi.vsccveeaaavsi.feipyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevceceesvi.vsccveeaaavsi.gfmdsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevceceesvi.vsccveeaaavsi.hjxsle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevceceesvi.vsccveeaaavsi.ildcfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevceceesvi.vsccveeaaavsi.qbpihx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevceceesvi.vsccveeaaavsi.riviwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevceceesvi.vsccveeaaavsi.ruqdog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevceceesvi.vsccveeaaavsi.sllzad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevceceesvi.vsccveeaaavsi.slruwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevceceesvi.vsccveeaaavsi.stkfns.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevceceesvi.vsccveeaaavsi.vuonno.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevceceesvi.vsccveeaaavsi.zfwkwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevcecvsvi.vsccveveavsi.aycbpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevcecvsvi.vsccveveavsi.dnytdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevcecvsvi.vsccveveavsi.fefxfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevcecvsvi.vsccveveavsi.feipyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevcecvsvi.vsccveveavsi.fihcwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevcecvsvi.vsccveveavsi.gimbjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevcecvsvi.vsccveveavsi.kjpzvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevcecvsvi.vsccveveavsi.ktmuae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevcecvsvi.vsccveveavsi.oozlqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevcecvsvi.vsccveveavsi.rzvflv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevcecvsvi.vsccveveavsi.tqmagv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevcecvsvi.vsccveveavsi.vuonno.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevcecvsvi.vsccveveavsi.xdrsxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevcecvsvi.vsccveveavsi.ydfcqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevcecvsvi.vsccveveavsi.zbpbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasevcecvsvi.vsccveveavsi.zfwkwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvceeesvi.vscveaaavs.aycbpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvceeesvi.vscveaaavs.baishengwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvceeesvi.vscveaaavs.chvwrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvceeesvi.vscveaaavs.crgcfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvceeesvi.vscveaaavs.fefxfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvceeesvi.vscveaaavs.fwggea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvceeesvi.vscveaaavs.gimbjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvceeesvi.vscveaaavs.gjdfei.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvceeesvi.vscveaaavs.hviljm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvceeesvi.vscveaaavs.kjpzvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvceeesvi.vscveaaavs.ktmuae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvceeesvi.vscveaaavs.mvvbrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvceeesvi.vscveaaavs.nbmlys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvceeesvi.vscveaaavs.pljjmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvceeesvi.vscveaaavs.qbpihx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvceeesvi.vscveaaavs.qzswkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvceeesvi.vscveaaavs.rtegfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvceeesvi.vscveaaavs.sjfmje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvceeesvi.vscveaaavs.stkfns.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvceeesvi.vscveaaavs.wkzsav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvceeesvi.vscveaaavs.wszouq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvceeesvi.vscveaaavs.yuqfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvcevsvi.vscvevavs.aovskd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvcevsvi.vscvevavs.buaktq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvcevsvi.vscvevavs.dgcxkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvcevsvi.vscvevavs.fzctif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvcevsvi.vscvevavs.hjxsle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvcevsvi.vscvevavs.iysyln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvcevsvi.vscvevavs.jfysaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvcevsvi.vscvevavs.jgyxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvcevsvi.vscvevavs.kjpzvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvcevsvi.vscvevavs.mpenym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvcevsvi.vscvevavs.ruqdog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvcevsvi.vscvevavs.tqmagv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvcevsvi.vscvevavs.wseqrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvcevsvi.vscvevavs.xdfglk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvcevsvi.vscvevavs.xqajbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viasvcevsvi.vscvevavs.yplahe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavcasevcesei.visvasveeascoiras.3997884.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavcasevcesei.visvasveeascoiras.4-4-j-tyu-uyt.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200050246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavcasevcesei.visvasveeascoiras.5xvtv1.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavcasevcesei.visvasveeascoiras.6j449d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavcasevcesei.visvasveeascoiras.cdfsiejkf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavcasevcesei.visvasveeascoiras.cdsqma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavcasevcesei.visvasveeascoiras.cjsuye.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavcasevcesei.visvasveeascoiras.eoamsf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavcasevcesei.visvasveeascoiras.gzj7001.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200050253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavcasevcesei.visvasveeascoiras.ijowbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavcasevcesei.visvasveeascoiras.kxdnjf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavcasevcesei.visvasveeascoiras.lurojy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavcasevcesei.visvasveeascoiras.nfffte.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavcasevcesei.visvasveeascoiras.rataxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavcasevcesei.visvasveeascoiras.realme.cool"; content:"Host"; http_header; classtype:attempted-recon; sid:200050259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavcasevcesei.visvasveeascoiras.rsnhxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavcasevcesei.visvasveeascoiras.sblr005.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200050261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavcasevcesei.visvasveeascoiras.udhdcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavcasevcesei.visvasveeascoiras.v8vbdk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavcasevcesei.visvasveeascoiras.ykjclz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaveacesvcsceei.viasavesvoerrcasias.1345578.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200050265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaveacesvcsceei.viasavesvoerrcasias.3667884.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaveacesvcsceei.viasavesvoerrcasias.4vul30.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaveacesvcsceei.viasavesvoerrcasias.botom1.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaveacesvcsceei.viasavesvoerrcasias.cjsuye.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaveacesvcsceei.viasavesvoerrcasias.dkvvuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaveacesvcsceei.viasavesvoerrcasias.evcinc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaveacesvcsceei.viasavesvoerrcasias.fhalul.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaveacesvcsceei.viasavesvoerrcasias.ioxzyf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaveacesvcsceei.viasavesvoerrcasias.j68gux.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaveacesvcsceei.viasavesvoerrcasias.jxvstx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaveacesvcsceei.viasavesvoerrcasias.klvjnr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaveacesvcsceei.viasavesvoerrcasias.kpygtz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaveacesvcsceei.viasavesvoerrcasias.lmhau8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaveacesvcsceei.viasavesvoerrcasias.mwsxcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaveacesvcsceei.viasavesvoerrcasias.rbqvre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaveacesvcsceei.viasavesvoerrcasias.tdenvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaveacesvcsceei.viasavesvoerrcasias.tmwhe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaveacesvcsceei.viasavesvoerrcasias.utshxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaveacesvcsceei.viasavesvoerrcasias.vspuhg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viaveacesvcsceei.viasavesvoerrcasias.zlsrwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavsavceei.vivcsvecsaias.2fx3p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavsavceei.vivcsvecsaias.2z6dpf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavsavceei.vivcsvecsaias.6j449d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavsavceei.vivcsvecsaias.axrdkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavsavceei.vivcsvecsaias.ctokrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavsavceei.vivcsvecsaias.dkvvuy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavsavceei.vivcsvecsaias.drlbyz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavsavceei.vivcsvecsaias.dzerdf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavsavceei.vivcsvecsaias.eoamsf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavsavceei.vivcsvecsaias.ioyatz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavsavceei.vivcsvecsaias.ixk0s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavsavceei.vivcsvecsaias.jrignr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavsavceei.vivcsvecsaias.kxdnjf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavsavceei.vivcsvecsaias.mbruzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavsavceei.vivcsvecsaias.mzbqid.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavsavceei.vivcsvecsaias.ozmubm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavsavceei.vivcsvecsaias.qqwfas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavsavceei.vivcsvecsaias.rbqvre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavsavceei.vivcsvecsaias.rewvsa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavsavceei.vivcsvecsaias.sgrxpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavsavceei.vivcsvecsaias.sl86as.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavsavceei.vivcsvecsaias.tgytgc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavsavceei.vivcsvecsaias.utshxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavsavceei.vivcsvecsaias.vr0rx.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viavsavceei.vivcsvecsaias.ykjclz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viazonasegura.betabcp-pe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200050311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vibqghxlbu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200050312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vibramwyprzedaz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200050313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"victorarath99.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200050314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vicvsceivei.vivsresivesi.qyoqyz.za.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200050315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vicvssecrecseveci.cvevsreaveesi.upuphone.ltd"; content:"Host"; http_header; classtype:attempted-recon; sid:200050316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vicvssecrecsevei.vciesersvesi.ckhnlk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vidhyaclinic.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200050318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viecsaaaevier.vecevvasceveroi.3838833.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200050319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viecsaeaevier.vcaasceaeroi.bcjgin.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viecvaeaes.visaeansaier.vppvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vieivsaaes.visaeaneaie.xvaunoh.bar"; content:"Host"; http_header; classtype:attempted-recon; sid:200050322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viesaceosi.visavvseaos.dovxqw.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200050323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vietgahp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200050324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viettel-com-dot-c2c01-531c7.uc.r.appspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200050325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"view.campanhasbradesco.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200050326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viewdcsigns.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200050327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viewmynevara.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200050328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vigoroussimplisticomnipage837373.bienvenidoskzx.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200050329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vihted-marketinfo.36205122222.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200050330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vihtedpage-market.8900008797.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200050331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"villabismi.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200050332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"villelarusaparts.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200050333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vilronander.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200050334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vinakids-chienbinhnhivietnam2022.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200050335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vincenrosale.bond"; content:"Host"; http_header; classtype:attempted-recon; sid:200050336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vinted-dostawa-pl5444.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200050337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vinted-pl-gj32d.archwall.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200050338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vinted-pl-gj32d.doltemp.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200050339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vinted-pl-gj32d.hinhdep.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200050340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vinted-pl-gj32d.merakian.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vinted-pl-gj32d.onapps.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200050342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vinted.evorelure.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200050343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vinted.sprzedaz.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200050344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vintedl-polska2650.peylcen039.wiki"; content:"Host"; http_header; classtype:attempted-recon; sid:200050345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vintedl-polska4076.paidship040.wiki"; content:"Host"; http_header; classtype:attempted-recon; sid:200050346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vintedl-polskanw17544.qemns5.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200050347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vintedl-polskanw9375.lanspn91.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200050348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vintedl-polskanw9376.vaspel102.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200050349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vipfbtools.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200050350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viral-tante-nakal.webdns.eu.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200050351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viral.vidio.jeje.terbaru2022.dnsme.eu.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200050352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viral.vidio.simontok.terbaru.dnsme.eu.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200050353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"virtual.bienlineweb.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200050354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"virtual.labdigbdbqapb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200050355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"virtual.labdigbdbstgpb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200050356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"virtualcordialsaludo.procces12.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200050357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"virtualnetbrasil.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200050358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"virtuousmonstrousmoto.bebetal.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200050359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vis-stort.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200050360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaaaeveeccsvcrcaorsai.vieissacirvoeainicrcivsioir.edziyc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visacsoiesiver.o.axrcbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visacsvoiceeesiver.cea.pkwrdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visacsvoieesiver.oea.uarmbh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaesccaiceer.ooaesc.fpaksix.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaesccaiceer.ooaesc.lasdas.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaesccaiceer.ooaesc.lkosdf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaesccaiceer.ooaesc.lslpoi223.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaesccaiceer.ooaesc.lsoidike.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaesccaiceer.ooaesc.margincolor.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaesccaiceer.ooaesc.msjhdyue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaesccaiceer.ooaesc.olkijsd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaessccaivr.ooaesc.csndax.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaessccaivr.ooaesc.hsyueiod.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaessccaivr.ooaesc.i1lyb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaessccaivr.ooaesc.lijhdy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaessccaivr.ooaesc.lssopdie.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaessccaivr.ooaesc.msjhdyue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaessccaivr.ooaesc.t4gwf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaessccaivr.ooaesc.vajdui.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaevccasieer.aeooaesc.baudiqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaevccasieer.aeooaesc.dayuhao.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaevccasieer.aeooaesc.jssjue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaevccasieer.aeooaesc.laiisode.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaevccasieer.aeooaesc.lxiskjde.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaevccasieer.aeooaesc.magxoisud.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaevccasieer.aeooaesc.qhjkof.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaevccasieveer.ceooaesc.i1lyb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaevccasieveer.ceooaesc.koplsig.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaevccasieveer.ceooaesc.magxoisud.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaevccasieveer.ceooaesc.sokdjhre.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaevccasieveer.ceooaesc.xlsoida.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaevcsoissiver.o.mdxbrn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaevcsoissiver.o.orcbvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaevessiver.a.pgdfhw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaevvcsoeissiver.oea.nofalw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaevvcsoeissiver.oea.orcbvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visagetapetess.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200050398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visao-digital.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200050399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visasoccaicesiver.ooaesc.baudiqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visasoccaicesiver.ooaesc.bfhju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visasoccaicesiver.ooaesc.lsxoisd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visasoccaicesiver.ooaesc.ma4k6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visasoccaicesiver.ooaesc.msjudi.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visasoccaieiver.ooaesc.gsyeidt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visasoccaieiver.ooaesc.huaxianone.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visasoccaieiver.ooaesc.lijhdy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visasoccaieiver.ooaesc.lssncjud.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visasoccaieiver.ooaesc.ma4k6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visasoccaieiver.ooaesc.namkdi.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visasoccaieiver.ooaesc.nishilaji.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visasoccaieiver.ooaesc.tablegsh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visasoccaieiver.ooaesc.xzkuf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visasoccaieiver.ooaesc.xzsywte.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visasvccaoieeesiver.ceooaesc.ghdes.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visasvccaoieeesiver.ceooaesc.huaxianone.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visasvccaoieeesiver.ceooaesc.koplsig.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visasvccaoieeesiver.ceooaesc.margincolor.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visasvccaoieeesiver.ceooaesc.nsjdyues.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visasvccaoieeesiver.ceooaesc.toutiaohao.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visasvccaoieeesiver.ceooaesc.tyroess.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visasvccaoiesiver.oeooaesc.ksidujed.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visasvccaoiesiver.oeooaesc.tablegsh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visasvccaoiesiver.oeooaesc.tashpitum.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavcccasceissiver.ooaesc.hsyueiod.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavcccasceissiver.ooaesc.lsoieuy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavcccasceissiver.ooaesc.msjudi.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavcccasceissiver.ooaesc.tsyudasd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavcccasceissiver.ooaesc.usideq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavcccasceissiver.ooaesc.xmsjdhf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavcccasossiver.ooaesc.asdaeer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavcccasossiver.ooaesc.cocodes.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavcccasossiver.ooaesc.lijhdy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavcccasossiver.ooaesc.lssqwe3ly.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavcccasossiver.ooaesc.msjdud.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavcccasossiver.ooaesc.sdwsyde.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavcccasossiver.ooaesc.toutiaohao.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavcccasossiver.ooaesc.usideq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavcccasossiver.ooaesc.xmsjude.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavcccasossiver.ooaesc.xskieus.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavcccasossiver.ooaesc.xuyhsjd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaveccasceiver.ooaesc.0e0db.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaveccasceiver.ooaesc.lsoieuyr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaveccasceiver.ooaesc.magxoisud.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaveccasceiver.ooaesc.olkijsd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaveccasceiver.ooaesc.sinnod.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaveccasceiver.ooaesc.t4gwf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaveccassver.ooaesc.laoisuej.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaveccassver.ooaesc.lslpoi223.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaveccassver.ooaesc.nvmkdi.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaveccassver.ooaesc.qhjkof.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visaveccassver.ooaesc.xuyhsjd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavevsiceveer.cea.xewfoa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavevsiceveer.cea.zqawii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavevsiveer.aea.svfocp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccacseissiver.oeooaesc.6f1mf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccacseissiver.oeooaesc.baudiqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccacseissiver.oeooaesc.nanish.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccacseissiver.oeooaesc.nsjdyues.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccacseissiver.oeooaesc.qhjkof.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccacseissiver.oeooaesc.qishui3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccacseissiver.oeooaesc.xujsioa.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccacseissiver.oeooaesc.yianskd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccacseoeissiver.ceooaesc.6f1mf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccacseoeissiver.ceooaesc.fpaksix.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccacseoeissiver.ceooaesc.gsyeuwi.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccacseoeissiver.ceooaesc.lasdas.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccacseoeissiver.ceooaesc.mpdskdf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccaeseiver.aeooaesc.6f1mf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccaeseiver.aeooaesc.ckfbs.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccaeseiver.aeooaesc.dayuhao.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccaeseiver.aeooaesc.laoisuej.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccaeseiver.aeooaesc.namkdi.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccaeseiver.aeooaesc.nanish.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccaeseiver.aeooaesc.sokdjhre.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccaeseiver.aeooaesc.xmsjude.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccaeseseiver.ceooaesc.gsyeidt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccaeseseiver.ceooaesc.lsoidike.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccaeseseiver.ceooaesc.mangesd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccaeseseiver.ceooaesc.olkijsd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visavvccaeseseiver.ceooaesc.xlsoida.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viscvaeaeier.vacaasveoir.ivupqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viseioscai.vscsaieeicso.stjjjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visescai.vscsaeeiso.qxkahc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viseseoieoccai.vsscessoaceeuiosscoc.gnpais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vishnya.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200050486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visioal.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200050487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visionaportale-bper.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200050488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visioncenterss.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200050489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vissvvesie.vvssceoi.nmlubc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"visveaeaverrei.vivacrvecoisec.gzj8007.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200050491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vitale-informations.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200050492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vitaledepartement.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200050493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vitalquirkyorders747992.bienvenidosbnx.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200050494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vitaltechnical.coml3abob5v4bisonn1zhb3.vitaltechnical.coml3abob5v4bisonn1zhb3314841443244450783.sunnysportswear.biz"; content:"Host"; http_header; classtype:attempted-recon; sid:200050495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vitinhhoangson.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200050496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcaveaecsevai.saaa.oamprk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcaveaecsevai.saaa.riley.ltd"; content:"Host"; http_header; classtype:attempted-recon; sid:200050498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcaveescvai.saa.zrxpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceaevecrsavaci.soaa.owens.ltd"; content:"Host"; http_header; classtype:attempted-recon; sid:200050500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceaevecrsavaci.soaa.xulhaq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.gzfkmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.igh1zc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.nohk5h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcecviasai.visvsai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.dwbjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.ggnxmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.igh1zc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.mnvhdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.nohk5h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.nsuuieds.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.vp5lju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceiasai.vicsvesai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.mdf7pv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.qslbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200050715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.yz046c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevasvai.vicsvesai.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.ncbhdjei.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.nsuuieds.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200050804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevciasvai.visvsai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.ksiudje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200050885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.vp5lju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviaaaivcs.vicsvesai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.64i23s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.igh1zc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.mdf7pv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.nohk5h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.nsuuieds.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200050963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacasaivc.visvsai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200050999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.ksiudje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.mdf7pv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.ncbhdjei.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviacsvaisi.visvsai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.nsuuieds.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200051126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviasaivc.vicsvesai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.ahiftgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.gzfkmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200051216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.vp5lju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivceviavaisi.vicsvesai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.ahiftgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.dwbjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.ksiudje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.mnvhdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200051297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevicasvaia.visvsai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.ggnxmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.gzfkmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.ksiudje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.ncbhdjei.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.nsuuieds.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcevisvaia.vicsvesai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.4-4-j-tyu-uyt.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200051400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.6j449d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.aalme.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.cdsqma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.ctokrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.dxsahh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.ebqzws.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.evcinc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.fph186.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.gzj5012.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200051409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.gzj7001.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200051410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.gzj7009.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200051411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.hcoklg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.hlsmyl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.hwzwtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.lgn09m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.metabrain.group"; content:"Host"; http_header; classtype:attempted-recon; sid:200051416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.nfffte.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.osnolv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.ouomrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.qogdsq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.realme.cool"; content:"Host"; http_header; classtype:attempted-recon; sid:200051421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.ruesxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.sd2ed.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.sl86as.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.syzyzz.ltd"; content:"Host"; http_header; classtype:attempted-recon; sid:200051425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.tvvghs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.verse6.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200051427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.vkzvur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsavceei.visvsvecasias.yjefsg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.ggnxmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.tubatue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200051498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.vp5lju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.yz046c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviavai.visvsai.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.mnvhdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.tubatue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200051576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.vp5lju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcscviivai.visvsai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.ksiudje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.nohk5h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.nsuuieds.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.qslbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200051662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.vp5lju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavai.vicsvesai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.icfpvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.ksiudje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.nohk5h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200051749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.yz046c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiavcai.vicsvesai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.64i23s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.dwbjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.mosjide.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiciavcai.visvsai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.ahiftgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.gzfkmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200051891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.ksiudje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200051916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsicisvcai.visvsai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.64i23s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.ksiudje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.mosjide.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.ncbhdjei.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.nsuuieds.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200051999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaaicca.vicsvesai.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.ggnxmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200052056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.igh1zc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.mosjide.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.ncbhdjei.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.nohk5h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaacvaicca.visvsai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.ggnxmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200052142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.icfpvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200052146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.ncbhdjei.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiaaviccai.vicsvesai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.icfpvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200052217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacaiae.vicsvesai.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.gzfkmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200052296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200052322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.vp5lju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiacvcaiae.visvsai.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.cpnqor.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200052374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.icfpvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200052384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.ncbhdjei.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.nsuuieds.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200052410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.vp5lju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.yz046c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiicsvcaia.visvsai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.mdf7pv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.ncbhdjei.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaaicca.vicsvesai.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.dwbjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200052532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.icfpvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200052538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.ncbhdjei.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.nsuuieds.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.vp5lju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisacvaicca.visvsai.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.ggnxmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200052619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.igh1zc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200052645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.yz046c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiisaviccai.vicsvesai.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.dwbjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200052693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.igh1zc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.mdf7pv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200052726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.vp5lju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscaias.vicsvesai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.ksiudje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200052806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiiscvcaias.visvsai.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.mdf7pv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.nohk5h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200052877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivai.vicsvesai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.64i23s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.nohk5h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.tubatue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200052955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsiivcaia.vicsvesai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.64i23s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200052999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.ahiftgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.gzfkmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.icfpvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.mnvhdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.ncbhdjei.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.nohk5h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200053046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsisvcai.vicsvesai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsreesecei.vcirveeaaevesi.ojabvb.za.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200053053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcssecreesecei.vcieeaaevesi.yanwen.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200053054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.c23ios.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.ggnxmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.mdf7pv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.nohk5h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200053129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.vp5lju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsvciiveai.visvsai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.cpnqor.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200053174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.igh1zc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.mnvhdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.ncbhdjei.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.tubatue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200053209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.vp5lju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.w5p6z9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaaaiecc.vicsvesai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.mnvhdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.tubatue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.vp5lju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.yz046c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviacveaiao.visvsai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.ahiftgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.gzfkmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.mnvhdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.mosjide.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200053388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviaeaiao.vicsvesai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.icfpvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.ksiudje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.nohk5h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.nsuuieds.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviavaiec.vicsvesai.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.1lvvvd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.64i23s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.nohk5h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200053526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaieca.vicsvesai.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.0bj313.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.5e2q0e.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.ahiftgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.c18y03.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.icfpvc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.lzvsi5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.mnvhdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.mosjide.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.q4nb0o.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.s4mhki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiaaiecc.vicsvesai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.0a67vu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.0tgbq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.1iui33.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.208e6a.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.3xju6c.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.45v2lh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.4g871x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.83y6dk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.9j1a4h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.9qwfvb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.bf2o5x.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.bk34jd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.bp7uq2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.bwlrdn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.fvxl0d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.gd4365.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.gly7z6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.htof1s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.i92s9d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.j8vn1q.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.jdmm35.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.lphv98.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.mnvhdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.n8zehe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.nsuuieds.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.ny210y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.qslbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.tcv93y.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.ueyjdiks.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.ugu66t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.wa0hmg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.x7qbjf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.yc0xn8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.zf2wco.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviiacvaieca.visvsai.znrp52.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.09vz0h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.0rv6h8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.15tf68.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.1bmro5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.2jld0p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.2t8hvj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.2zpvzm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.365xvn.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.3ilgqj.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.3n1jt3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.3wj9fr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.3wuhd3.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.4161t5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.45ml1t.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.4awkri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.4lj1od.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.65xfer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.7ld7p9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.7myib6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.7n6v2v.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.7v560g.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.8jyshd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.8p0sos.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.92rgso.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.9a8k92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.9p5kqm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.9u60bt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.a7w3p7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.ac3ir9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.bd7tlz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.c2yfkr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.ciiwd0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.cpnqor.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200053741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.cx03ta.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.e5susf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.ey2duy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.f6553s.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.feed0of.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.fi03rf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.gh43qf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.go81z5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.gzfkmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.j328u2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.jg5vw2.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.jqsqm7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.k6yxxb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.kesgc9.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.kow9qt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.kp9lm0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.lmc2ry.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.lt474l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.m1vcl8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.mfxzq4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.mnvhdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.n9k5yv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.n9uv92.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.no2exp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.no9sh7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.o8ix1j.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.of6jh4.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.phxc3l.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.qslbjc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.r7302f.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.ruw0bh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.s6vx9m.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.se9ijc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.tepyl0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.ufnj7h.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.ui2siu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.urgggv.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200053778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.usytdje.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.v72weu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.vhvjv7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.vp5lju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.wztqb7.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.xg5mqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.xvto6z.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.yqyk4k.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.yvey51.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivcsviveai.vicsvesai.zobca6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.2ebz23.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.2fx3p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.6j449d.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.6nc5p5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.7wqxmz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.87qi6p.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.ajkqym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.botom1.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.cxusvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.eoamsf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.gyzt802.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200053799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.hgpqys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.hwzwtq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.ia4myc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.iuruyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.kqstye.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.mbruzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.noqaub.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.onazqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.opyxhy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.orhznj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.osnolv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.ozmubm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.rataxm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.sblr009.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200053813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.tmwhe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200053814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.txqqzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivecasvcceei.visavsvercasias.uabtme.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viveevsvccai.vivscvcveaeii.aycbpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viveevsvccai.vivscvcveaeii.bagatn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viveevsvccai.vivscvcveaeii.byvvoi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viveevsvccai.vivscvcveaeii.chbogc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viveevsvccai.vivscvcveaeii.fqeitb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viveevsvccai.vivscvcveaeii.qzswkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viveevsvccai.vivscvcveaeii.rtegfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viveevsvccai.vivscvcveaeii.stkfns.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viveevsvccai.vivscvcveaeii.tjqiry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viveevsvccai.vivscvcveaeii.uclutx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viveevsvceeai.vivcsvceaaaeii.aggfpx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viveevsvceeai.vivcsvceaaaeii.qzswkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viveevsvceeai.vivcsvceaaaeii.rzvflv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viveevsvceeai.vivcsvceaaaeii.slruwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viveevsvceeai.vivcsvceaaaeii.tjqiry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viveevsvceeai.vivcsvceaaaeii.wkzsav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viveevsvceeai.vivcsvceaaaeii.xqajbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viveevsvceeai.vivcsvceaaaeii.ydfcqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viveevsvceeai.vivcsvceaaaeii.yjzswj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viveevsvceeai.vivcsvceaaaeii.yuqfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.azdilh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aa.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.aae.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ca.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200053999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.cae.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.azdilh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.ea.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.azdilh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevaasvcsi.eae.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.a.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ae.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.azdilh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.c.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.azdilh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ce.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.azdilh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.e.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.azdilh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevasvsi.ee.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsvcai.vivsvcvaei.bkmtxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsvcai.vivsvcvaei.bujzts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsvcai.vivsvcvaei.chbogc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsvcai.vivsvcvaei.chipel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsvcai.vivsvcvaei.dgcxkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsvcai.vivsvcvaei.fwggea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsvcai.vivsvcvaei.gdxsmh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsvcai.vivsvcvaei.gffhis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsvcai.vivsvcvaei.giyarc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsvcai.vivsvcvaei.gymkux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsvcai.vivsvcvaei.hviljm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsvcai.vivsvcvaei.iyazyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsvcai.vivsvcvaei.mvvbrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsvcai.vivsvcvaei.mwdkgc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsvcai.vivsvcvaei.raoxxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsvcai.vivsvcvaei.vuonno.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsvcai.vivsvcvaei.wszouq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsvcai.vivsvcvaei.xdrsxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsveeai.vivsvcaaaei.baishengwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsveeai.vivsvcaaaei.buaktq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsveeai.vivsvcaaaei.cknvrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsveeai.vivsvcaaaei.doozbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsveeai.vivsvcaaaei.fqeitb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsveeai.vivsvcaaaei.gfmdsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsveeai.vivsvcaaaei.idolba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsveeai.vivsvcaaaei.ildcfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsveeai.vivsvcaaaei.jsbwdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsveeai.vivsvcaaaei.kzfgvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsveeai.vivsvcaaaei.mwdkgc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsveeai.vivsvcaaaei.nbmlys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsveeai.vivsvcaaaei.ovnrqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsveeai.vivsvcaaaei.qzswkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsveeai.vivsvcaaaei.raoxxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsveeai.vivsvcaaaei.ruqdog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsveeai.vivsvcaaaei.shxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsveeai.vivsvcaaaei.sjfmje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsveeai.vivsvcaaaei.wkzsav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsveeai.vivsvcaaaei.wseqrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsveeai.vivsvcaaaei.xlrepg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsveeai.vivsvcaaaei.ydfcqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsveeai.vivsvcaaaei.yjzswj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsveeai.vivsvcaaaei.zbpbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivevsveeai.vivsvcaaaei.zfwkwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscavcai.vicvsvecveaeii.eabboz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscavcai.vicvsvecveaeii.feipyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscavcai.vicvsvecveaeii.guskko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscavcai.vicvsvecveaeii.gymkux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscavcai.vicvsvecveaeii.hjxsle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscavcai.vicvsvecveaeii.kjpzvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscavcai.vicvsvecveaeii.kzfgvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscavcai.vicvsvecveaeii.oozlqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscavcai.vicvsvecveaeii.ovnrqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscavcai.vicvsvecveaeii.qqoehr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscavcai.vicvsvecveaeii.rtegfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscavcai.vicvsvecveaeii.rzvflv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscavcai.vicvsvecveaeii.sjfmje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscavcai.vicvsvecveaeii.yjzswj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscavcai.vicvsvecveaeii.zbpbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscaveeai.vcivsevceaaaeii.dnytdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscaveeai.vcivsevceaaaeii.eovlfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscaveeai.vcivsevceaaaeii.feipyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscaveeai.vcivsevceaaaeii.fzctif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscaveeai.vcivsevceaaaeii.giyarc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscaveeai.vcivsevceaaaeii.gpcaia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscaveeai.vcivsevceaaaeii.gymkux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscaveeai.vcivsevceaaaeii.kbxlax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscaveeai.vcivsevceaaaeii.nbmlys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscaveeai.vcivsevceaaaeii.oozlqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscaveeai.vcivsevceaaaeii.ovnrqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscaveeai.vcivsevceaaaeii.ruqdog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscaveeai.vcivsevceaaaeii.rzvflv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscaveeai.vcivsevceaaaeii.shxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivieevscaveeai.vcivsevceaaaeii.yjzswj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaieesvi.cvsaeveeaasvis.aycbpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaieesvi.cvsaeveeaasvis.chbogc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaieesvi.cvsaeveeaasvis.derttj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaieesvi.cvsaeveeaasvis.feipyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaieesvi.cvsaeveeaasvis.fqeitb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaieesvi.cvsaeveeaasvis.gpcaia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaieesvi.cvsaeveeaasvis.hjxsle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaieesvi.cvsaeveeaasvis.qzswkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaieesvi.cvsaeveeaasvis.sllzad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaieesvi.cvsaeveeaasvis.slruwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaieesvi.cvsaeveeaasvis.xaxoso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaieesvi.cvsaeveeaasvis.xqajbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaieesvi.cvsaeveeaasvis.yjnxkx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaieesvi.cvsaeveeaasvis.yjzswj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaivsvi.vcsaveevesvsi.bkmtxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaivsvi.vcsaveevesvsi.bujzts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaivsvi.vcsaveevesvsi.byvvoi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaivsvi.vcsaveevesvsi.chbogc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaivsvi.vcsaveevesvsi.crgcfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaivsvi.vcsaveevesvsi.gffhis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaivsvi.vcsaveevesvsi.gjdfei.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaivsvi.vcsaveevesvsi.hyicnl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaivsvi.vcsaveevesvsi.idolba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaivsvi.vcsaveevesvsi.iysyln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaivsvi.vcsaveevesvsi.mpenym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaivsvi.vcsaveevesvsi.qbpihx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaivsvi.vcsaveevesvsi.shxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaivsvi.vcsaveevesvsi.sllzad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaivsvi.vcsaveevesvsi.xdrsxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaivsvi.vcsaveevesvsi.xlrepg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaivsvi.vcsaveevesvsi.ydfcqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"viviesvccaivsvi.vcsaveevesvsi.zbpbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsavcai.vivsvcveaei.byvvoi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsavcai.vivsvcveaei.chbogc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsavcai.vivsvcveaei.derttj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsavcai.vivsvcveaei.dldaen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsavcai.vivsvcveaei.dnytdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsavcai.vivsvcveaei.feipyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsavcai.vivsvcveaei.guskko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsavcai.vivsvcveaei.jsbwdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsavcai.vivsvcveaei.kjpzvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsavcai.vivsvcveaei.ktmuae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsavcai.vivsvcveaei.mpenym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsavcai.vivsvcveaei.sjfmje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsavcai.vivsvcveaei.tvwump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsavcai.vivsvcveaei.uclutx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsavcai.vivsvcveaei.xdfglk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsavcai.vivsvcveaei.xdrsxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsavcai.vivsvcveaei.xqajbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsavcai.vivsvcveaei.yplahe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsaveeai.vivsvceaaaei.bagatn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsaveeai.vivsvceaaaei.buaktq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsaveeai.vivsvceaaaei.chvwrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsaveeai.vivsvceaaaei.crgcfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsaveeai.vivsvceaaaei.dldaen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsaveeai.vivsvceaaaei.feipyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsaveeai.vivsvceaaaei.fqeitb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsaveeai.vivsvceaaaei.guskko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsaveeai.vivsvceaaaei.gymkux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsaveeai.vivsvceaaaei.hjxsle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsaveeai.vivsvceaaaei.hviljm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsaveeai.vivsvceaaaei.mpenym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsaveeai.vivsvceaaaei.mwdkgc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsaveeai.vivsvceaaaei.raoxxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsaveeai.vivsvceaaaei.slruwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsaveeai.vivsvceaaaei.stkfns.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsaveeai.vivsvceaaaei.tndado.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsaveeai.vivsvceaaaei.wkzsav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsaveeai.vivsvceaaaei.wseqrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivievsaveeai.vivsvceaaaei.xlrepg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivisvcaieesvi.vsaveeaasvs.aggfpx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivisvcaieesvi.vsaveeaasvs.aycbpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivisvcaieesvi.vsaveeaasvs.chipel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivisvcaieesvi.vsaveeaasvs.derttj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivisvcaieesvi.vsaveeaasvs.eabboz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivisvcaieesvi.vsaveeaasvs.fqeitb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivisvcaieesvi.vsaveeaasvs.gdxsmh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivisvcaieesvi.vsaveeaasvs.gimbjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivisvcaieesvi.vsaveeaasvs.giyarc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivisvcaieesvi.vsaveeaasvs.jsbwdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivisvcaieesvi.vsaveeaasvs.jwluwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivisvcaieesvi.vsaveeaasvs.sjfmje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivisvcaieesvi.vsaveeaasvs.slruwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivisvcaieesvi.vsaveeaasvs.xdfglk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivisvcaieesvi.vsaveeaasvs.zbpbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivisvcaivsvi.vsavevesvs.aggfpx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivisvcaivsvi.vsavevesvs.gffhis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivisvcaivsvi.vsavevesvs.jfysaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivisvcaivsvi.vsavevesvs.jgyxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivisvcaivsvi.vsavevesvs.jwluwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivisvcaivsvi.vsavevesvs.ktmuae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivisvcaivsvi.vsavevesvs.uclutx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsacsocieesesia.c.qbcbta.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsacsoiesesia.o.pkwrdl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsacsoiesesia.o.vnbmwi.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200054638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsacvsoieesesia.oea.nnawmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccacceoissesia.ooaesc.i1lyb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccacceoissesia.ooaesc.msodik.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccacsissesia.ooaesc.ksudie.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccacsissesia.ooaesc.lasdas.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccacsissesia.ooaesc.lspxoiu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccacsissesia.ooaesc.lsxoisd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccacsissesia.ooaesc.magxoisud.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccacsissesia.ooaesc.msjdyf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccacsissesia.ooaesc.qhjkof.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccaecesesia.ooaesc.bahusue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccaecesesia.ooaesc.cocodes.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccaecesesia.ooaesc.erqer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccaecesesia.ooaesc.ksidujed.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccaecesesia.ooaesc.tsyudasd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccaecesesia.ooaesc.xskieus.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccaesesia.ooaesc.asdaeer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccaesesia.ooaesc.ixousudy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccaesesia.ooaesc.lsggppe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccaesesia.ooaesc.mjsudio.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccaesesia.ooaesc.sokdjhre.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccaesesia.ooaesc.tashpitum.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccavceoissesia.oeooaesc.0e0db.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccavceoissesia.oeooaesc.cdiosa.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccavceoissesia.oeooaesc.gsyeuwi.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccavceoissesia.oeooaesc.lsgsda.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccavceoissesia.oeooaesc.ncjhdyri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccavceoissesia.oeooaesc.sdaiexswe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccavceoissesia.oeooaesc.xlsoida.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccavceoissesia.oeooaesc.xskieus.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccavceseoissesia.ceooaesc.6f1mf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccavceseoissesia.ceooaesc.dayuhao.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccavceseoissesia.ceooaesc.hajsued.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccavceseoissesia.ceooaesc.huaxianone.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccavceseoissesia.ceooaesc.lshosie.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccavceseoissesia.ceooaesc.lspxoiu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccavceseoissesia.ceooaesc.qiehao.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccavceseoissesia.ceooaesc.toutiaohao.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccavceseoissesia.ceooaesc.xmsjdhf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccaveesesesia.ceooaesc.cocodes.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccaveesesesia.ceooaesc.i1lyb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccaveesesesia.ceooaesc.lssncjud.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccaveesesesia.ceooaesc.qiehao.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccaveesesesia.ceooaesc.recordd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccaveesesesia.ceooaesc.xlsoida.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccaveesesia.aeooaesc.b5jsued.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccaveesesia.aeooaesc.baidu123.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccaveesesia.aeooaesc.jpisi.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccaveesesia.aeooaesc.tsyudasd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavccaveesesia.aeooaesc.v3454.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavesceesia.c.azrsog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavesesia.a.jfcxph.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavesesia.a.oajqfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavvesceeesia.cea.zvzqtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavveseesia.aea.mdxbrn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsavveseesia.aea.zvzqtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivscsccaoceesesia.ooaesc.fpaksix.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivscsccaoceesesia.ooaesc.laiisode.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivscsccaoceesesia.ooaesc.sokdjhre.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivscsccaoceesesia.ooaesc.usideq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivscsccaoceesesia.ooaesc.v3454.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivscsccaoisesia.ooaesc.asdaeer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivscsccaoisesia.ooaesc.asjdied.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivscsccaoisesia.ooaesc.baudiqq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivscsccaoisesia.ooaesc.jhusd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivscvccasoeesesia.oeooaesc.gsyeidt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivscvccasoeesesia.oeooaesc.jsodiek.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivscvccasoeesesia.oeooaesc.laoisuej.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivscvccasoeesesia.oeooaesc.lspxoiu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivscvccasoeesesia.oeooaesc.mpdskdf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivscvccasoeesesia.oeooaesc.usideq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivscvccasoeieesesia.ceooaesc.asdueiw.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivscvccasoeieesesia.ceooaesc.bfhju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivscvccasoeieesesia.ceooaesc.ckfbs.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivscvccasoeieesesia.ceooaesc.jsodiek.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivscvccasoeieesesia.ceooaesc.jssjue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivscvccasoeieesesia.ceooaesc.lsasdfg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivscvccasoeieesesia.ceooaesc.olkijsd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivscvccasoeieesesia.ceooaesc.paddki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200054717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivseavccseoissesia.c.wiqlcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivseavcsoissesia.o.kbroxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivseavecsesesia.c.isvuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivseavvcseoissesia.oea.xuacoo.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200054721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivseavvecesesesia.cea.vlunrr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevciceesvi.vscaveeaasvsi.buaktq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevciceesvi.vscaveeaasvsi.doozbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevciceesvi.vscaveeaasvsi.gffhis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevciceesvi.vscaveeaasvsi.gfmdsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevciceesvi.vscaveeaasvsi.kbxlax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevciceesvi.vscaveeaasvsi.mvvbrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevciceesvi.vscaveeaasvsi.pljjmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevciceesvi.vscaveeaasvsi.sllzad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevciceesvi.vscaveeaasvsi.wkzsav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevciceesvi.vscaveeaasvsi.wseqrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevciceesvi.vscaveeaasvsi.xqajbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevciceesvi.vscaveeaasvsi.zbpbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevcicvsvi.vsacvevesvsi.aycbpv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevcicvsvi.vsacvevesvsi.chipel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevcicvsvi.vsacvevesvsi.chvwrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevcicvsvi.vsacvevesvsi.dldaen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevcicvsvi.vsacvevesvsi.fqeitb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevcicvsvi.vsacvevesvsi.fzctif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevcicvsvi.vsacvevesvsi.gdxsmh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevcicvsvi.vsacvevesvsi.guskko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevcicvsvi.vsacvevesvsi.hviljm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevcicvsvi.vsacvevesvsi.idolba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevcicvsvi.vsacvevesvsi.ildcfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevcicvsvi.vsacvevesvsi.jfysaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevcicvsvi.vsacvevesvsi.ktmuae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevcicvsvi.vsacvevesvsi.mpenym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevcicvsvi.vsacvevesvsi.ovnrqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevcicvsvi.vsacvevesvsi.qbpihx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevcicvsvi.vsacvevesvsi.qzswkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevcicvsvi.vsacvevesvsi.rtegfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevcicvsvi.vsacvevesvsi.ruqdog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevcicvsvi.vsacvevesvsi.slruwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevcicvsvi.vsacvevesvsi.wkzsav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevcicvsvi.vsacvevesvsi.xlrepg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsevcicvsvi.vsacvevesvsi.yjnxkx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.ca.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiaavccais.cae.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.c.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiavcais.ce.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiecaiecsn.viscaieaeeivsei.yetbrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiecaieosn.visceieaeeivsei.cyrvcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsiecioesn.visecaeeeivsei.cyrvcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.azdilh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200054999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.ea.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.azdilh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.eae.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sa.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisavccais.sae.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.e.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.ee.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.uwskpn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.s.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.azdilh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsisvcais.se.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.azdilh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vca.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvaavecc.vcae.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvacei.vivsvcesias.2uz8yl.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvacei.vivsvcesias.6nc5p5.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvacei.vivsvcesias.axcgpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvacei.vivsvcesias.cxusvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvacei.vivsvcesias.dtyweh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvacei.vivsvcesias.gzj7001.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200055519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvacei.vivsvcesias.hgpqys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvacei.vivsvcesias.hxsbie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvacei.vivsvcesias.ia4myc.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvacei.vivsvcesias.iiyqmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvacei.vivsvcesias.iuruyp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvacei.vivsvcesias.lcacsa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvacei.vivsvcesias.mfts.ltd"; content:"Host"; http_header; classtype:attempted-recon; sid:200055526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvacei.vivsvcesias.opyxhy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvacei.vivsvcesias.q04nkf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvacei.vivsvcesias.qlxmyy666.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200055529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvacei.vivsvcesias.qqwfas.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvacei.vivsvcesias.rewvsa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvacei.vivsvcesias.rsnhxr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvacei.vivsvcesias.tvvghs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvacei.vivsvcesias.zgzemr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.azdilh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.qwkctv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vc.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.azdilh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.slrggt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.vrlgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvavec.vce.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcieesvi.vsaveaasvs.aempvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcieesvi.vsaveaasvs.aggfpx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcieesvi.vsaveaasvs.bagatn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcieesvi.vsaveaasvs.baishengwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcieesvi.vsaveaasvs.bkmtxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcieesvi.vsaveaasvs.bujzts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcieesvi.vsaveaasvs.byvvoi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcieesvi.vsaveaasvs.dgcxkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcieesvi.vsaveaasvs.dnytdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcieesvi.vsaveaasvs.fefxfv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcieesvi.vsaveaasvs.gffhis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcieesvi.vsaveaasvs.gfmdsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcieesvi.vsaveaasvs.gjdfei.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcieesvi.vsaveaasvs.kjpzvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcieesvi.vsaveaasvs.ktmuae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcieesvi.vsaveaasvs.mpenym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcieesvi.vsaveaasvs.mvvbrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcieesvi.vsaveaasvs.pljjmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcieesvi.vsaveaasvs.tjqiry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcieesvi.vsaveaasvs.yjnxkx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcieesvi.vsaveaasvs.yjzswj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcieesvi.vsaveaasvs.yplahe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcieesvi.vsaveaasvs.zfwkwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcivsvi.vsavevsvs.aempvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcivsvi.vsavevsvs.bagatn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcivsvi.vsavevsvs.derttj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcivsvi.vsavevsvs.dldaen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcivsvi.vsavevsvs.fqeitb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcivsvi.vsavevsvs.giyarc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcivsvi.vsavevsvs.gjdfei.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcivsvi.vsavevsvs.iysyln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcivsvi.vsavevsvs.ktmuae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcivsvi.vsavevsvs.oozlqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcivsvi.vsavevsvs.pljjmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcivsvi.vsavevsvs.qzswkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcivsvi.vsavevsvs.uclutx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcivsvi.vsavevsvs.wkzsav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcivsvi.vsavevsvs.ydfcqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcivsvi.vsavevsvs.yplahe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcivsvi.vsavevsvs.yuqfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvcivsvi.vsavevsvs.zfwkwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsveccascesia.ooaesc.dieowp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsveccascesia.ooaesc.ksudie.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsveiasecsn.viscaiescvsvei.yetbrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsveiscesn.visacscevsvei.yetbrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.azdilh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.sbbqgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.weaoha.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.wqjquj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviavecc.veae.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.ampzgd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.azdilh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.cubqgo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.gcffqs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.kjgyuh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.laepkg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.mivuxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.ovtnnx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.tpcoks.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsviaveccv.ea.znnrhz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.adbfjw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.arokdo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.bcqhge.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.bohoqn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.eyejaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.ftesee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.gtvkkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.hpuxer.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.ilxsng.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.jttieh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.jypxmt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.kfkvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.lfjnel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.mwotcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.oicagy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.oxfszz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.pzmfvj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.qecayj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.qgxzwp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.slhviz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.slpvzw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.thncuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.urguud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.vtcujb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.wblxdw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.xhhkgk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.yjfcag.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.zkddix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.ve.zkqaun.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.azqfll.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.brjlgf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.cnywpo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.ctgmba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.cymtvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.dkcpql.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.gtuohh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.gxlous.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.hckrqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.hfljsy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.hjlztx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.hvcgrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.hxomnb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.ibpwma.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.inqpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.ixrnff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.jcjmiq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.jxkmab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.klnccv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.kuttkc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.ldbppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.mjwhts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.nprgmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.nqyeac.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.nrnepy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.nsbjrf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.nsgrud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.opqzmz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.oqrpwc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.owcafr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.rcbiet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.sknais.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.tezbbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.tpojjs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.tqobgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.vsddjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.vxhxkw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.wbintx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.wjdemo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.wlmhmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.xkjohe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.xkttcc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.xqzexk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.xvkidr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.xxvxbx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.yicvzn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.yqmgnk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.ytiwld.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvivec.vee.zdochr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvsscecaseia.ooaesc.d3skoc332.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvsscecaseia.ooaesc.fpaksix.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvsscecaseia.ooaesc.ixousudy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvsscecaseia.ooaesc.lssqwe3ly.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvsscecaseia.ooaesc.nanish.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvsscecaseia.ooaesc.plaiksd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvsscecaseia.ooaesc.sinnod.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvsscecaseia.ooaesc.toutiaohao.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvvccaeseeesia.ceooaesc.dayuhao.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvvccaeseeesia.ceooaesc.lsasdfg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvvccaeseeesia.ceooaesc.lspxoiu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvvccaeseeesia.ceooaesc.nxhgsyd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvvccaeseeesia.ceooaesc.omgg0.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvvccaeseeesia.ceooaesc.pilidu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvvccaeseeesia.ceooaesc.sokdjhre.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvvccaeseeesia.ceooaesc.tiafedf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvvccaeseeesia.ceooaesc.xlsoida.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvvccaeseeesia.ceooaesc.xujsioa.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvvccaesesia.aeooaesc.ghdes.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvvccaesesia.aeooaesc.jskidoe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvvccaesesia.aeooaesc.laiisode.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvvccaesesia.aeooaesc.lianges.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvvccaesesia.aeooaesc.lsggppe.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvvccaesesia.aeooaesc.lsklsope.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvvccaesesia.aeooaesc.lsxoisd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvvccaesesia.aeooaesc.msjudi.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvvccaesesia.aeooaesc.msodik.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvvccaesesia.aeooaesc.nhduio.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvvccaesesia.aeooaesc.tablegsh.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vivsvvccaesesia.aeooaesc.vardir.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vixxbmkqfp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200055917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vj72o-dqaaa-aaaad-qenia-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200055918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vjbwxqdtzn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200055919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vjhted-shopping.2657668009.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200055920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vjhvkh-rt09gu-t6y9g-0e-gfvertgne-rtjng9-etrnhjgeww.obs.la-south-2.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200055921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vjjfqojvha.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200055922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vjkejpfpoy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200055923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vjnted-market.7564354686.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200055924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vjnted.96323651548.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200055925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vjntedshop.3544565453.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200055926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vjoafmcenz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200055927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vjsa.stainslis.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200055928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vk.sokipunaiiviolitepgss.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200055929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vkdhqulrwp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200055930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vkqmiscroc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200055931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vkro30a.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200055932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vkypwnplhn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200055933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vlabcp-bo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200055934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vlapkxsefl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200055935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vlaqnoeorp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200055936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vlbdpllfoa.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200055937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vlbpo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200055938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vlpeecodopeni2520profile-20email2520webmailfurh2520ttt.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200055939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vm-blttkub-cco.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200055940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vm-encrypted-d0cs.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200055941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vm-encrypted-d0cs.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200055942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vmboxx.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200055943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vmonvmyknz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200055944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vmtfjoxqpt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200055945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vnbzjlujgw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200055946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vnhwyjjhjy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200055947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vnyudatdqb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200055948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"voba-energiepraemie-2022.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200055949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vocsfrpe.t.justns.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200055950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vodafonebillpay.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200055951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"voice-maish.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200055952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"voicemessagejsgd.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200055953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"voicemessagejsgd.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200055954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"voivcelet.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200055955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vokvbkmlqm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200055956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"volkbrewcoffee.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200055957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"volvocarskc.us1.list-manage.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200055958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"voodapvodl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200055959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vorsruszoy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200055960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"votreassurance-cpam-ameli.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200055961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"votrenewsletterpare-mail-bd9c84.ingress-daribow.ewp.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200055962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vouchere-astrazeneca.totemsoftware.ro"; content:"Host"; http_header; classtype:attempted-recon; sid:200055963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"voxcarriersolutions.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200055964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vparivahan.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200055965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vpibqpgmzb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200055966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vppixnrlhx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200055967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vps25526.inmotionhosting.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200055968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vpsddowcmd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200055969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vratdzzhiw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200055970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vrdmovytds.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200055971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vrg5-0gkl-wker9gjnb-0w8rhbgvn0-wdnvm-0whrv.obs.ap-southeast-3.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200055972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaieaceaecevi.viascarvcora.1p2igt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200055973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaieivscaeaiv.vicacveeveaasi.derttj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaieivscaeaiv.vicacveeveaasi.eabboz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaieivscaeaiv.vicacveeveaasi.eovlfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaieivscaeaiv.vicacveeveaasi.giyarc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaieivscaeaiv.vicacveeveaasi.guskko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaieivscaeaiv.vicacveeveaasi.qqoehr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaieivscaeaiv.vicacveeveaasi.rzvflv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaieivscaeaiv.vicacveeveaasi.stkfns.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaieivscaeeeiv.vciaceveeaaaais.bagatn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaieivscaeeeiv.vciaceveeaaaais.derttj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaieivscaeeeiv.vciaceveeaaaais.fqeitb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaieivscaeeeiv.vciaceveeaaaais.gpcaia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaieivscaeeeiv.vciaceveeaaaais.gymkux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaieivscaeeeiv.vciaceveeaaaais.jfysaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaieivscaeeeiv.vciaceveeaaaais.jgyxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaieivscaeeeiv.vciaceveeaaaais.jwluwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaieivscaeeeiv.vciaceveeaaaais.kjpzvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaieivscaeeeiv.vciaceveeaaaais.qqoehr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaieivscaeeeiv.vciaceveeaaaais.shxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaieivscaeeeiv.vciaceveeaaaais.sjfmje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaieivscaeeeiv.vciaceveeaaaais.tvwump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaieivscaeeeiv.vciaceveeaaaais.xlrepg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaievsecaiv.viaccveveaasi.chvwrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaievsecaiv.viaccveveaasi.edvqan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaievsecaiv.viaccveveaasi.fzctif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaievsecaiv.viaccveveaasi.gimbjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200055999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaievsecaiv.viaccveveaasi.gjdfei.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaievsecaiv.viaccveveaasi.iyazyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaievsecaiv.viaccveveaasi.jgyxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaievsecaiv.viaccveveaasi.rtegfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaievsecaiv.viaccveveaasi.xaxoso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaievsecaiv.viaccveveaasi.ydfcqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaievseceeiv.viaccveeaaaasi.aempvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaievseceeiv.viaccveeaaaasi.bujzts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaievseceeiv.viaccveeaaaasi.byvvoi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaievseceeiv.viaccveeaaaasi.crgcfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaievseceeiv.viaccveeaaaasi.eabboz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaievseceeiv.viaccveeaaaasi.fihcwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaievseceeiv.viaccveeaaaasi.qqoehr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaievseceeiv.viaccveeaaaasi.tqmagv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaievseceeiv.viaccveeaaaasi.vuonno.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaievseceeiv.viaccveeaaaasi.xlrepg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaievseceeiv.viaccveeaaaasi.yjzswj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaievseceeiv.viaccveeaaaasi.yuqfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeaiv.viacveveaas.bagatn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeaiv.viacveveaas.buaktq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeaiv.viacveveaas.chbogc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeaiv.viacveveaas.chvwrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeaiv.viacveveaas.dldaen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeaiv.viacveveaas.eovlfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeaiv.viacveveaas.fzctif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeaiv.viacveveaas.ildcfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeaiv.viacveveaas.iysyln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeaiv.viacveveaas.jfysaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeaiv.viacveveaas.kbxlax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeaiv.viacveveaas.ktmuae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeaiv.viacveveaas.nbmlys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeaiv.viacveveaas.qqoehr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeaiv.viacveveaas.sjfmje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeaiv.viacveveaas.stkfns.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeaiv.viacveveaas.tndado.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeaiv.viacveveaas.vuonno.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeaiv.viacveveaas.wszouq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeaiv.viacveveaas.xdrsxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeaiv.viacveveaas.zfwkwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeeeiv.viacveeaaaas.aggfpx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeeeiv.viacveeaaaas.chvwrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeeeiv.viacveeaaaas.derttj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeeeiv.viacveeaaaas.eabboz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeeeiv.viacveeaaaas.fihcwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeeeiv.viacveeaaaas.gdxsmh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeeeiv.viacveeaaaas.gjdfei.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeeeiv.viacveeaaaas.gpcaia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeeeiv.viacveeaaaas.hjxsle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeeeiv.viacveeaaaas.jsbwdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeeeiv.viacveeaaaas.mwdkgc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeeeiv.viacveeaaaas.rtegfj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeeeiv.viacveeaaaas.rzvflv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeeeiv.viacveeaaaas.shxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeeeiv.viacveeaaaas.sllzad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeeeiv.viacveeaaaas.tndado.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeeeiv.viacveeaaaas.xaxoso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaiivsaeeeiv.viacveeaaaas.xdrsxp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseaiv.viacvevaas.bkmtxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseaiv.viacvevaas.chipel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseaiv.viacvevaas.dldaen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseaiv.viacvevaas.eabboz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseaiv.viacvevaas.eovlfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseaiv.viacvevaas.feipyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseaiv.viacvevaas.fzctif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseaiv.viacvevaas.gfmdsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseaiv.viacvevaas.giyarc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseaiv.viacvevaas.gpcaia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseaiv.viacvevaas.hjxsle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseaiv.viacvevaas.kbxlax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseaiv.viacvevaas.pljjmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseaiv.viacvevaas.raoxxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseaiv.viacvevaas.slruwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseaiv.viacvevaas.tndado.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseaiv.viacvevaas.xaxoso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseaiv.viacvevaas.yjnxkx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseaiv.viacvevaas.zfwkwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseeeiv.viacveaaaas.bagatn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseeeiv.viacveaaaas.chvwrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseeeiv.viacveaaaas.dnytdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseeeiv.viacveaaaas.eovlfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseeeiv.viacveaaaas.feipyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseeeiv.viacveaaaas.gfmdsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseeeiv.viacveaaaas.qbpihx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseeeiv.viacveaaaas.shxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseeeiv.viacveaaaas.slruwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseeeiv.viacveaaaas.wkzsav.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseeeiv.viacveaaaas.xaxoso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseeeiv.viacveaaaas.xdfglk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsaivseeeiv.viacveaaaas.xqajbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsekjrexql.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsioscaeevi.viccavcoorr.1p2igt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsppfwukpz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vstex.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200056092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvecsoicseavcia.c.oajqfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvecsoicseavcia.c.ukohwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvecsoisavcia.o.isvuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvecsoisavcia.o.nnawmj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvecsoisavcia.o.pmnaeh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvecsvoiseavcia.oea.nofalw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvecsvoiseavcia.oea.uarmbh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsveevcscoeiasvcia.c.orcbvv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsveevcscoeiasvcia.c.vlunrr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsveevcsoiasvcia.o.isvuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsveevsacsevcia.c.nofalw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsveevsacsevcia.c.tppwpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsveevsacsevcia.c.wezouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsveevsasvcia.a.tvbcmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsveevvcsceoeiasvcia.cea.ukohwk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsveevvcsceoeiasvcia.cea.xewfoa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsveevvcsoeiasvcia.oea.oajqfn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsveevvcsoeiasvcia.oea.svfocp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsveevvsacesevcia.cea.wezouj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesaccavceia.ooaesc.baidu123.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesaccavceia.ooaesc.bvhjjd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesaccavceia.ooaesc.hliurkd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesaccavceia.ooaesc.ncjhdyri.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesaccavceia.ooaesc.sokdjhre.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesaccavceia.ooaesc.yianskd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesoccaiceavcia.ooaesc.ghdes.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesoccaiceavcia.ooaesc.lsoiujds.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesoccaiceavcia.ooaesc.ma4k6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesoccaiceavcia.ooaesc.usideq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesoccaiceavcia.ooaesc.xzkuf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesoccaisvcia.ooaesc.hsyueiod.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesoccaisvcia.ooaesc.lskoposi.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesoccaisvcia.ooaesc.lsloposl.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesoccaisvcia.ooaesc.lxiskjde.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesoccaisvcia.ooaesc.margincolor.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesoccaisvcia.ooaesc.trsas.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvessacscavca.ooaesc.hajsued.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvessacscavca.ooaesc.huaxianone.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvessacscavca.ooaesc.losijdue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvessacscavca.ooaesc.mangesd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvessacscavca.ooaesc.nanish.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvessacscavca.ooaesc.tashpitum.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvessacscavca.ooaesc.xskieus.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaaveceia.ceooaesc.hliurkd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaaveceia.ceooaesc.lshosie.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaaveceia.ceooaesc.lsloposl.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaaveceia.ceooaesc.lsposie.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaaveceia.ceooaesc.mpdskdf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaaveceia.ceooaesc.nanish.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaaveceia.ceooaesc.paddki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaaveceia.ceooaesc.tsyudasd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaaveceia.ceooaesc.yianskd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaaveia.aeooaesc.erqer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaaveia.aeooaesc.gtxdifu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaaveia.aeooaesc.jpisi.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaaveia.aeooaesc.losijdue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaaveia.aeooaesc.lsposie.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaaveia.aeooaesc.mxkusjdi.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaaveia.aeooaesc.nsjdyues.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaaveia.aeooaesc.olkijsd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaaveia.aeooaesc.paddki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaaveia.aeooaesc.tyroess.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaoieavcia.oeooaesc.baidu123.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaoieavcia.oeooaesc.bfhju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaoieavcia.oeooaesc.lskoposi.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaoieavcia.oeooaesc.lsoidike.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaoieavcia.oeooaesc.lsposie.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaoieavcia.oeooaesc.maediof.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaoieavcia.oeooaesc.nhduio.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaoieavcia.oeooaesc.paddki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaoieavcia.oeooaesc.trsas.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaoieavcia.oeooaesc.xmsjdhf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaoieavcia.oeooaesc.xmsjude.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaoieavcia.oeooaesc.xuyhsjd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaoieavcia.oeooaesc.xzsywte.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaoieseavcia.ceooaesc.asdaeer.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaoieseavcia.ceooaesc.asjdied.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaoieseavcia.ceooaesc.bfhju.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaoieseavcia.ceooaesc.gsyeidt.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaoieseavcia.ceooaesc.hliurkd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaoieseavcia.ceooaesc.jhusd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaoieseavcia.ceooaesc.kaosid.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaoieseavcia.ceooaesc.lijhdjsu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaoieseavcia.ceooaesc.lsqpoisue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaoieseavcia.ceooaesc.mjsudio.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaoieseavcia.ceooaesc.msjhdyue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvesvccaoieseavcia.ceooaesc.yianskd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevcccasceiasvcia.ooaesc.hsyueiod.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevcccasceiasvcia.ooaesc.likijs.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevcccasceiasvcia.ooaesc.lsoidike.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevcccasceiasvcia.ooaesc.ma4k6.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevcccasceiasvcia.ooaesc.msjdud.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevcccasceiasvcia.ooaesc.vajdui.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevcccasoasvcia.ooaesc.d3skoc332.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevcccasoasvcia.ooaesc.dayuhao.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevcccasoasvcia.ooaesc.laiisode.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevcccasoasvcia.ooaesc.lijhdjsu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevcccasoasvcia.ooaesc.v3454.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevsavcia.a.tvbcmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevsavcia.a.xwdvad.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevsccaacevcia.ooaesc.jpisi.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevsccaacevcia.ooaesc.ksidujed.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevsccaacevcia.ooaesc.lijhdy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevsccaacevcia.ooaesc.lsklsope.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevsccaacevcia.ooaesc.lsshkly.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevsccaacevcia.ooaesc.lssopdie.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevsccaacevcia.ooaesc.mangesd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevsccaacevcia.ooaesc.recordd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevsccaacevcia.ooaesc.vardir.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevsccaascia.ooaesc.d3skoc332.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevsccaascia.ooaesc.dieowp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevsccaascia.ooaesc.lsqpoisue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevsccaascia.ooaesc.msjdud.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevsccaascia.ooaesc.msjdyf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevsccaascia.ooaesc.msjhdyue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevsccaascia.ooaesc.mxkusjdi.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevsccaascia.ooaesc.paddki.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevsccaascia.ooaesc.sinnod.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevsccaascia.ooaesc.xlsoida.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevsccaascia.ooaesc.xskieus.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevsvavceceia.cea.nofalw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevsvavceceia.cea.svfocp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccacseiasvcia.oeooaesc.jssjue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccacseiasvcia.oeooaesc.lijhdy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccacseiasvcia.oeooaesc.likijs.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccacseiasvcia.oeooaesc.lsjdhi.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccacseiasvcia.oeooaesc.lspxoiu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccacseiasvcia.oeooaesc.msodik.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccacseoeiasvcia.ceooaesc.gtxdifu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccacseoeiasvcia.ceooaesc.hsyueiod.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccacseoeiasvcia.ceooaesc.lciskdu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccacseoeiasvcia.ceooaesc.tashpitum.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccasaesevcia.ceooaesc.csndax.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccasaesevcia.ceooaesc.i1lyb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccasaesevcia.ceooaesc.jssjue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccasaesevcia.ceooaesc.lsloposl.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccasaesevcia.ceooaesc.lsoidike.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccasaesevcia.ceooaesc.mpdskdf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccasaesevcia.ceooaesc.usideq.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccasaesevcia.ceooaesc.xzsywte.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccasaevcia.aeooaesc.ghdes.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccasaevcia.aeooaesc.hajsued.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccasaevcia.aeooaesc.harginsu.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccasaevcia.aeooaesc.hoalside.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccasaevcia.aeooaesc.hsyueiod.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccasaevcia.aeooaesc.lsoidike.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccasaevcia.aeooaesc.lsoieuy.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccasaevcia.aeooaesc.mpdskdf.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccasaevcia.aeooaesc.nhduio.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccasaevcia.aeooaesc.xiuydw.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccasaevcia.aeooaesc.xlsoida.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvevvccasaevcia.aeooaesc.xskieus.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvieivscacaiv.vicasveevesasi.aggfpx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvieivscacaiv.vicasveevesasi.fqeitb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvieivscacaiv.vicasveevesasi.gdxsmh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvieivscacaiv.vicasveevesasi.gfmdsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvieivscacaiv.vicasveevesasi.gjdfei.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvieivscacaiv.vicasveevesasi.ildcfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvieivscacaiv.vicasveevesasi.iyazyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvieivscacaiv.vicasveevesasi.mvvbrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvieivscacaiv.vicasveevesasi.qzswkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvieivscacaiv.vicasveevesasi.riviwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvieivscacaiv.vicasveevesasi.ruqdog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvieivscacaiv.vicasveevesasi.rzvflv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvieivscacaiv.vicasveevesasi.sjfmje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvieivscacaiv.vicasveevesasi.tvwump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvieivscacaiv.vicasveevesasi.xqajbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvieivscacaiv.vicasveevesasi.ydfcqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvieivscaceeiv.vciaseveeaasais.dnytdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvieivscaceeiv.vciaseveeaasais.rzvflv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvieivscaceeiv.vciaseveeaasais.sjfmje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvieivscaceeiv.vciaseveeaasais.tqmagv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvieivscaceeiv.vciaseveeaasais.wszouq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvieivscaceeiv.vciaseveeaasais.xqajbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvieivscaceeiv.vciaseveeaasais.ydfcqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvieivscaceeiv.vciaseveeaasais.yjzswj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievsccaiv.viascvevesasi.bagatn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievsccaiv.viascvevesasi.byvvoi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievsccaiv.viascvevesasi.chipel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievsccaiv.viascvevesasi.chvwrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievsccaiv.viascvevesasi.cknvrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievsccaiv.viascvevesasi.derttj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievsccaiv.viascvevesasi.feipyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievsccaiv.viascvevesasi.gdxsmh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievsccaiv.viascvevesasi.gimbjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievsccaiv.viascvevesasi.jwluwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievsccaiv.viascvevesasi.ktmuae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievsccaiv.viascvevesasi.oozlqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievsccaiv.viascvevesasi.qbpihx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievsccaiv.viascvevesasi.riviwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievsccaiv.viascvevesasi.stkfns.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievsccaiv.viascvevesasi.uclutx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievsccaiv.viascvevesasi.ydfcqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievscceeiv.viacsveeaasasi.aggfpx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievscceeiv.viacsveeaasasi.chvwrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievscceeiv.viacsveeaasasi.derttj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievscceeiv.viacsveeaasasi.dgcxkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievscceeiv.viacsveeaasasi.giyarc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievscceeiv.viacsveeaasasi.guskko.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievscceeiv.viacsveeaasasi.hjxsle.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievscceeiv.viacsveeaasasi.mvvbrc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievscceeiv.viacsveeaasasi.nbmlys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievscceeiv.viacsveeaasasi.pxibhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievscceeiv.viacsveeaasasi.ruqdog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievscceeiv.viacsveeaasasi.sjfmje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievscceeiv.viacsveeaasasi.tjqiry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievscceeiv.viacsveeaasasi.wseqrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievscceeiv.viacsveeaasasi.yjzswj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievscceeiv.viacsveeaasasi.yuqfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvievscceeiv.viacsveeaasasi.zbpbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsacaiv.viasvevesas.aempvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsacaiv.viasvevesas.bkmtxa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsacaiv.viasvevesas.chbogc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsacaiv.viasvevesas.derttj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsacaiv.viasvevesas.dgcxkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsacaiv.viasvevesas.feipyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsacaiv.viasvevesas.gdxsmh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsacaiv.viasvevesas.giyarc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsacaiv.viasvevesas.gpcaia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsacaiv.viasvevesas.ildcfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsacaiv.viasvevesas.jsbwdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsacaiv.viasvevesas.jwluwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsacaiv.viasvevesas.mpenym.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsacaiv.viasvevesas.pljjmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsacaiv.viasvevesas.qzswkk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsacaiv.viasvevesas.sjfmje.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsacaiv.viasvevesas.tndado.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsacaiv.viasvevesas.yjnxkx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsacaiv.viasvevesas.yjzswj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsacaiv.viasvevesas.zfwkwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsaceeiv.viasveeaasas.aempvw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsaceeiv.viasveeaasas.baishengwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsaceeiv.viasveeaasas.chvwrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsaceeiv.viasveeaasas.derttj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsaceeiv.viasveeaasas.doozbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsaceeiv.viasveeaasas.eabboz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsaceeiv.viasveeaasas.gfmdsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsaceeiv.viasveeaasas.gpcaia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsaceeiv.viasveeaasas.iysyln.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsaceeiv.viasveeaasas.nbmlys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsaceeiv.viasveeaasas.raoxxv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsaceeiv.viasveeaasas.stkfns.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsaceeiv.viasveeaasas.tjqiry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsviivsaceeiv.viasveeaasas.yplahe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivscaiv.viasvevsas.aggfpx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivscaiv.viasvevsas.bagatn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivscaiv.viasvevsas.bujzts.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivscaiv.viasvevsas.cknvrx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivscaiv.viasvevsas.dldaen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivscaiv.viasvevsas.feipyb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivscaiv.viasvevsas.gfmdsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivscaiv.viasvevsas.gpcaia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivscaiv.viasvevsas.hviljm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivscaiv.viasvevsas.jfysaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivscaiv.viasvevsas.jsbwdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivscaiv.viasvevsas.kjpzvx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivscaiv.viasvevsas.mwdkgc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivscaiv.viasvevsas.pljjmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivscaiv.viasvevsas.shxump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivscaiv.viasvevsas.tjqiry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivscaiv.viasvevsas.xaxoso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivscaiv.viasvevsas.xdfglk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivscaiv.viasvevsas.xqajbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivscaiv.viasvevsas.yuqfcf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivsceeiv.viasveaasas.baishengwl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivsceeiv.viasveaasas.byvvoi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivsceeiv.viasveaasas.dgcxkf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivsceeiv.viasveaasas.dnytdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivsceeiv.viasveaasas.fzctif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivsceeiv.viasveaasas.gffhis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivsceeiv.viasveaasas.gimbjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivsceeiv.viasveaasas.gpcaia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivsceeiv.viasveaasas.gymkux.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivsceeiv.viasveaasas.iyazyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivsceeiv.viasveaasas.ktmuae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivsceeiv.viasveaasas.qbpihx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivsceeiv.viasveaasas.ruqdog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivsceeiv.viasveaasas.slruwb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivsceeiv.viasveaasas.tndado.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivsceeiv.viasveaasas.tqmagv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivsceeiv.viasveaasas.wszouq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivsceeiv.viasveaasas.xaxoso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vsvivsceeiv.viasveaasas.ydfcqh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vtcfqyewyx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vtgukuxboo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vtkgaxowfu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vtwlsqs.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vtxmail2018.myfreesites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vtxmails-site.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vub-appsk.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200056382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vudesign.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vukbywmzam.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vulcano.land"; content:"Host"; http_header; classtype:attempted-recon; sid:200056385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vutlphtuqh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vv3a7-uqaaa-aaaad-qenka-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200056387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vvallet-palyogn.technology"; content:"Host"; http_header; classtype:attempted-recon; sid:200056388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vvanm.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vvdltxiykf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vvfeb-4aaaa-aaaag-aa2fa-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200056391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vvhfdnterb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vvs-cronos.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vvurnrmcng.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vvv.lnterbamklbenefit-pe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vvv.zonasegurabeta-bcp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vvvpichinchaclean.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vvvvvcajapiura.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vvvvwcajapiura.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vvvw.lnterbamklbenefit-pe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vvwcajapiura.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vvwvvcajapiura.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vvww-shibasw-httmls-ssl.magixe-denlhome.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vvwwcajasullana.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vwcnblmfxh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vwehirnugf0e3wh5r0-gh-w0ehbf-0weh8f0-ehf0-e8hf.obs.ap-southeast-1.myhuaweicloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vwlfgpirfj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vwsdwzdbxl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vwviwufewo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vww-pancakeswap.finance"; content:"Host"; http_header; classtype:attempted-recon; sid:200056410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vwwaave.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200056411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vwwaave.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vwwcajapiura.pe"; content:"Host"; http_header; classtype:attempted-recon; sid:200056413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vwwcmacpiura.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vwwvvcajapiura.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vxaixn.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vxd.igwkrxp.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vxdse.myfreesites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vxijd.conain.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vxsvcgfvag.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vxvhqiqzmm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vystar.organmax.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200056422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vystar.security.canarotransportes.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200056423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vystar.security.homin-export.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vystarc.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200056425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vystarcredit.tecnomarsas.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vystarcu.alerts.amordevestido.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200056427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vystarcu.mobile.saniewriters.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vystarcumobile.theeducatorsassociation.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vystarcuorg98.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200056430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vysttarcu.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vyuwdblffq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vyztdtovtk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vzlenppfrd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vzq.brownanti.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vzt02.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vzxsrkqgpt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"w-magiceden-world-app-helo.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"w-magicedenn-app-worldd.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"w2t3ov.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"w6eu6w77.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"w782409br247e.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"w9eventos.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wa.mfs.gg"; content:"Host"; http_header; classtype:attempted-recon; sid:200056444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wadkqjl.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wahed-koudsi2001.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200056446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walkintubatlanta.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wallat-synchronizatiion.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200056448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wallat-synchronized.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200056449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walldesign.com.tr"; content:"Host"; http_header; classtype:attempted-recon; sid:200056450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wallet-authenticator-v1.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wallet-celo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wallet-coins.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wallet-connect-fix.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200056454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wallet-connect.serveuser.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wallet-connectt.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200056456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wallet-fixers.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200056457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wallet-near-logn.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wallet-resolvation.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200056459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wallet-sychnronizationn.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200056460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wallet-synchronizatiion-fixx.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200056461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wallet-synchronizatiion.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200056462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wallet-synchronization-fix.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200056463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wallet-synchronizationn-fix.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200056464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wallet-zynchronization.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200056465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wallet.neiarr.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wallet.polygon-technology.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200056467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walletappsolution.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walletconfig-link.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200056469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walletconfig.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200056470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walletconnect.hstn.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200056471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walletconnectmainet.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walletconnects.tel"; content:"Host"; http_header; classtype:attempted-recon; sid:200056473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walletconnectsdapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walletreconcile.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walletremotechecker.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wallets-dappsvalidator.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wallets-sync.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200056478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wallets-validate.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200056479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walletsconnected.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walletserverapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walletsrectification.network"; content:"Host"; http_header; classtype:attempted-recon; sid:200056482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wallett-orgnear.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walletvalidation.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200056484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walletvalidator.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200056485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walletvallidation.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200056486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walletwebrectification.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walllet-synchronization.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200056488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walltowalldiving.netcluesdemo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wana78420.myfreesites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wandereiri.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200056491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wandering-frosreg.people-meedia.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wandering-recip.u1r79b1c.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wandmidia.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wanornatealgorithm377829.biennvenidoy.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"want.trixeur.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wapuzagrfq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"waqassupplies.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"warakusipe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"warecommercial.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wareplugsvercel.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"warnertelecomm.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"warsa.bandungkab.go.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200056503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wartegbahari.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"watchcritic.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"watchess.com.pk"; content:"Host"; http_header; classtype:attempted-recon; sid:200056506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"waves-enterprise.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wb.3-128-201-130.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wb8e81.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wbiruapswt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wbiyjjdssu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wbldydwrdj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wbvivg.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wcdapconnect.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wchayeyhny.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wcjskkepum.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wcrswfojhy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wcvmbrmfuv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wda.worlddentalconference.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200056519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wddjanpwsc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wdfdf-101916.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wdfdzfjhsu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wdffsoyzud.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"we12nettexpres.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"weaned.tk"; content:"Host"; http_header; classtype:attempted-recon; sid:200056525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"weare-om.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"weathered-bread02.peoople-media.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"weathered.mnevicionzone.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web-43b27.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web-43b27.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200056530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web-bitikub.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web-hft.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web-hive.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web-ib-mizuhobankg-co-jp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web-ib-mizuhodank-co-jp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web-id-miizuhabonk-japan-teaphteara.life"; content:"Host"; http_header; classtype:attempted-recon; sid:200056536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web-id-miizuhabonk-japan-tephenaes.buzz"; content:"Host"; http_header; classtype:attempted-recon; sid:200056537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web-id-miizuhabonk-japan-tephenster.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200056538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web-id-mizuhebank-japan-caonr.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web-id-mizuhebank-japan-rnccs.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web-online-net.preview-domain.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web-sand-home.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web-server-03-19-update-cpanel.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web-soc.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web-soc.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200056545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web-uspsalerts.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200056546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web.159-89-233-165.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web.20-59-39-5.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web.activationaccess.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web.bank-mizhuho-jp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web.fixmyerrors.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web.ib.miazuhobank.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200056552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web.ib.miizuhabuck-japan-soloman.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web.ib.miizuhebunket-co-jp.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200056554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web.ib.mizuhebank.japan-updates.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200056555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web.ib.mizuhibanck.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200056556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web.ib.mizuhobanik-jp.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200056557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web.ib.mizvhiback.co.jp.cqaqs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web.ib.mizvhiback.co.jp.etfkg.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web.ib.mizvhibannk.co-jp.xfyike.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web.ib.mlzuhibannk.co.jp.oxcsh.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web.ib.mlzuhibannk.co.jp.shzss.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web.id.mizuhebank.japan-want.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200056563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web.id.mlziheb.ank-japan-bcd.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200056564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web.instantfix.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web.logodesign.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web.serv01.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web.yahoomail.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web.yahoomaill.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web.yahooupdate.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web3coi.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web3helpers.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200056572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web3walletmanager.com.ng"; content:"Host"; http_header; classtype:attempted-recon; sid:200056573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web66.com.tw"; content:"Host"; http_header; classtype:attempted-recon; sid:200056574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web8854.web07.bero-webspace.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200056575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web8923.web07.bero-webspace.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200056576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web9079.web07.bero-webspace.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200056577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web9174.web07.bero-webspace.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200056578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web9178.web07.bero-webspace.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200056579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web9186.web07.bero-webspace.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200056580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webacana--webacana.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webairbnb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webanaws.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webclient.moreapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webclienti-bperarea-sistema-sicuro-mobile-device.cfolks.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200056585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webconnectappsync.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webcpzonasegura.betabcp-pe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webemail-syksang.sang42555.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webermailcmttps-108716.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200056589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webguideliechtenstein.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webib-mizuhebank-id.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"weblnfo.sviluppo.host"; content:"Host"; http_header; classtype:attempted-recon; sid:200056592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webm.freesmokes.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webmail-102207.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webmail-109636.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webmail-aruba-it.formetindoor.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webmail-cisco.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webmail-cisco.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200056598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webmail-cpanel-secured-updated-password-0001.on.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webmail-laposte19.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webmail-laposte27.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webmail-roundcubeblack.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webmail-roundcubeblack.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200056603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webmail-sso8uyg.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200056604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webmail-update13.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webmail.bellahills.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webmail.salemgroups.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webmailadmin0.myfreesites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webmailmaster.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200056609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webmailpt.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webmails.internationals.rest"; content:"Host"; http_header; classtype:attempted-recon; sid:200056611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webmial.compact1.rest"; content:"Host"; http_header; classtype:attempted-recon; sid:200056612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webmial.constituters.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200056613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webmundibrazz.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"weboficialbanca.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webpersonaspichincha1.webpichinch.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webpersonpichinc.webperso.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webpersonspichincha001--webpichinch.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webpersonspichincha001.webpichinch.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webprovinciargs.args2022.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webqueries-aib.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webseguridadportalbancadavivienda.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webserver-lctpocitauliferay-prd.lfr.cloud"; content:"Host"; http_header; classtype:attempted-recon; sid:200056623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webserverbank.breakweb.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webservice-mailupdatemail.arqanexportcompany1664.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webserving-gahofo-3b5b.gafoho9884.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"website-boncoin.5-180-181-52.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200056627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"websitescs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"websiteusadev.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webtransacction.transacctionweb.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webvirtualesen.webcindario.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webzugreifen.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wedh-ex3-hy.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wedh-ex3-hy.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200056634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"weeklyimpracticallanserver--bpciec.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"weeksubaniv.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"weely.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200056637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"weerizvrra.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"weeverrev.bancolombia20.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wegenelab.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"weiekes.bond"; content:"Host"; http_header; classtype:attempted-recon; sid:200056641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wejkqndrzh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wellsfargo-device-verification.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wellsfargo-myonline.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wellsfargo.xghklkhggl.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wellsfargoverify.yesvidya.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wemasstedhrcngh58utg.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200056647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wendebridges.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200056648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wep3klvbihk.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"werare.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200056650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"weretongi.space"; content:"Host"; http_header; classtype:attempted-recon; sid:200056651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"werfwefwfwefewfewfdsfwedfaosijdasxuiocqwhjnclkqwfdqw.8231uysafjk.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"weri98-mhr9.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"weri98-mhr9.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200056654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"west2eastdispatch.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"westernunionverify.rwstaffing.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"westingusa.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200056657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"westrock-corp.dongfangfuli.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wetalk247channels.tv"; content:"Host"; http_header; classtype:attempted-recon; sid:200056659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wetr-com.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wetransfe-f5044.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wetransfe-f5044.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200056662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wetwateryaudacity.mastervbv30.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wf2323ref3423r2.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200056664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wfargosecurity.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wgxqbjypyw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"whare.100webspace.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"when.loseair.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"when.sulcfic.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wheocpmjvp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"whimsicalotherpaint.agriiccool0a.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"white-band-7524.tb4iugnz.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"white-bonus-05b3.wastemanddd.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"white-field-05e4.kdg6smak.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"white-island-0c892b710.1.azurestaticapps.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wholesher.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"whyvdizazg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"widadkamillah.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200056678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"widget-dot-lbk-asistente-pre-principal.appspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wigomexico.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wiguasno.space"; content:"Host"; http_header; classtype:attempted-recon; sid:200056681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wikuwsh.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wildcard.glengary.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wildchildclub.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"willkommenbeimneuenmicrosoft.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200056685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wilnahum.bond"; content:"Host"; http_header; classtype:attempted-recon; sid:200056686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wim7pt.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"windstream-net.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"windy.servety.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"winevineimports.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wink.fineee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"winted.16205122222.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200056692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wintedshop.3265122.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200056693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"winter-thunder-a1ba.gdjklahdkjsadampie.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wireconfirmation68c10a25442a3e13.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wirelessperfectgigabyte.bancolom01.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wires-business-starter.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200056697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wisgjgjhtios.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wisgjgjhtios.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200056699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wishestorealty.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wishextracts.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wispy-flower-c715.westemoreland.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wispy-frog-f21d.kbc21bma.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wiusmy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wizardly-sinoussi.20-3-248-177.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200056705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wjeqyhtgdh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wjjryggenp.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wjogkkfqno.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wjtufbmxek.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wjzannzlqd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wkazisan.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200056711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wkujtvqvbz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wlgbzwwbwo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wlgpngmtkt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wllfze.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wloipasojy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wm50098748930309454ft456.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200056717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wmfurgxlbe.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wmisturapromomiavic.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wmruafhham.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wmuzavbgjp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wmyuhfw.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wnetxysdme.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wnlakqj.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wnovaahcha.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wnrdsflvby.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wnzjieqngu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wobblyvaluablediskdrive.liuo1v9.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"woecfzpjaq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wooowoowokjbgdhm.provhvfvqqho.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wordpress-330920-2103168.cloudwaysapps.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wordpress-849488-2929804.cloudwaysapps.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wordpress-879836-3049867.cloudwaysapps.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wordywealthycleaninstall.donverif0654.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"workoutwalls.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"workprotocoles-com.webs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"worksolutioncompany.pe"; content:"Host"; http_header; classtype:attempted-recon; sid:200056737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"world-js.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"worldofwomengala.art"; content:"Host"; http_header; classtype:attempted-recon; sid:200056739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"worrisomepopularcamel.dinamicabancol.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wotgopmzem.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wp-login.azurewebsites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wp1sl706.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wprjekdfng.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wpupuiwyap.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wqbbmkqtpl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wqghkciqky.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wqnfiausph.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wqpq34hlqd.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200056749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wrdizfwger.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wrqccnz6.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200056751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wrroca.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ws-bltkub-com.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200056753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wsearch.kuronekoyamato.veeyrxl.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wslyaotmcz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wstgbvtcvhujpr0vngwr.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wstgbvtcvhujpr0vngwr.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200056757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wsvfiseuqb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wsxrmcku-115297.proposhareportalauth.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wtlzywwrcf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wtmipvyhma.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wtyhryutuytutyf-7lr6gh4czv627493.codeanyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wtyldqesds.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wua.soundestlink.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wucbrxworb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wucisrwvc.wosoc-sec.biz"; content:"Host"; http_header; classtype:attempted-recon; sid:200056766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wugfsrrsfu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wulddwacua.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wulximaqjn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wurzfvjatf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wv3vajpaeass.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wvbnvnhbq.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wvujvfgrrf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wvv-denlhome-ssl-l0gin.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wvvcajapiura.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wvvv-atendiment0-ssl-interno.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wvvvcajapiura.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wvvvwcajapiura.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wvvw-bitkup.sytes.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wvvwcajapiura-pe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wvvwdaviveindaprotalseguro.oficialdavivein.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wvvwdaviviendapersona.portalwebperson.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wvvwdaviviendaportal.webpersonas.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wvvwportalpersona.pondavivienda.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wvvwportalpersonas.wdavivienda.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wvvwportalpersonasseguro.ydavivenda.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wvvwportalseguro.entudavivienda.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wvwcmacpiura.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wvwsorare-com.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wvwvwcajapiura.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wvww-papycha.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200056791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wvwwcajapiura.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wvzkbkdwxz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ww-bltkub-com.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200056794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ww-magiceden-helllo-connectt.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ww-magiceden-web-page2.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ww.appcaixagov.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200056797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ww.livelocashback.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200056798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ww.logounico-viabcp.pe.alterego-technology.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ww.logounico-viabcp.pe.passivelyrichandunbothered.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ww1-autoatendimentoempresascxx-contab.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ww1.ibkcredit.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ww11.lbk-personas.website"; content:"Host"; http_header; classtype:attempted-recon; sid:200056803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ww2-cfautoatendimentoempreas.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwcajapiura.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwevbnet-com.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200056806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwhbltkub-win.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200056807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwjdatefilm.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwjwkfprmq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwline-bitku6.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwnet-bitkccub.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200056811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwnn-bltkub-cv.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200056812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwopensea.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwopensearch.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwsttuusrq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwv-acess-bit-bit-kub-log.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwv-emba-lagens-bit-acess.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwv-shibasvvap.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwvbcpbo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwvcajapiura.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwvcajavpiura.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwvporlalpersonas.bancochile.cl.avanexa.co.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200056822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwvv-i-am-shiba-com.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwvv-magic-eden-i.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwvvcajapiura.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwvvcajasullana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwvvksobvvbank.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwvvportalpersonas.davivvienda.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www-access-bitfinex-site.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www-banking.dkb.167-172-162-197.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200056830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www-bitflyer-go-com-br.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www-bradesco71.bra-ecomerce.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www-bradesco83.n12competnetpro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www-cita-previa-en-linea-cr.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www-cursosdigitalesmx-com.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www-degelyehuda-org-il.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www-diabike-bitkub-ca.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www-europe564598-com.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www-europessign-com.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www-okx-yg.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www-pancake-swap.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www-pancakeswap.finance"; content:"Host"; http_header; classtype:attempted-recon; sid:200056842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www-phantom-app.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200056843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www-shibaswap-login.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www-sparkasse.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www-walletbitkub-com.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www-www-shibaswxapp-conecct.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www1.cartaoatacadao.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www1.smbs-cozw.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.apby.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.apnt.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.bwmeta.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.dkmeta.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.dsmeta.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.enjf.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.eqpk.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.ezlf.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.fgmeta.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.fhmeta.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.fkmeta.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.fljt.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.ftmeta.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.geyv.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.gruf.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.ihgb.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.ikbq.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.ilhk.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.jfjuf.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.lbhmp.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.metafh.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.metagc.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.metahx.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.metakc.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.metakg.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.metakh.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.metakw.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.metamq.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200056877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.noxp.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.pfvm.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.vptp.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.xjgu.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.zfmcw.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazaon.co.jp.login.zvva.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazon.co.jp.dfgh56dsdh2dfg.rautpmh.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazon.co.jp.dfjryu75hf.otsuk7.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200056885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazon.co.jp.gfjj39fjjf.otsuk3.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200056886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazon.co.jp.sdgh06dkh.otsuk20.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200056887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazon.co.jp.yi7hjdd4fgj.aqmyylt.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amazonm.co.jploginf7gh4g8.bkkalf.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.amozozhnou.co.jp.yhrsgak.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.aoerseraz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.aoerseswz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.apulls.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200056893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.etc-meisai.jpetcrfunccode1013000000.eepilfn.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.mizuhobank.co.jp.zafzc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.rakutein.co.jp.zfervs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.srnbs-cteetonsd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.srnbs-ctezaonsd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.srnbs-ctruzsand.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.srnbs-ctruzsesd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www2.srnbs-cuiuocand.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www3.amozozhnou.co.jp.aijxttp.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www3.amozozhnou.co.jp.fvnrjkb.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www3.amozozhnou.co.jp.lrbnfnu.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www3.hk-yy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www3.idpass-net.nenkin.go.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200056906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwwbancolombiacomsucursalpersonas.bancavirtualp.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200056907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwwbitkub-com.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwwdbs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwwhomedecoration.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwwksobvvbank.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwwofficelogin01.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwwpancakeswap.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwww.eski-cceyyuuyrd.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwww.eski-ceusrurzd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwww.ezkl-oedsasue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwww.ezkl-oesnasue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwww.ezkl-oesozsue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwww.ezkl-oestusue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwww.ezkl-oeswssue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwww.ezkl-orstazue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwww.ezkl-orstczue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwww.ezkl-orstusue.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200056923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwxbltkub-gov.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200056924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wx.3cep.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wx33s1.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wxcmmmsdtr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wxfxddwfwy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wxkxirprnx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wxlisqwitm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wynvyrtjji.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wzbqeyiagn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wzf4cx.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wzoioixjcm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"x02vh6gw.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"x2y2.fi"; content:"Host"; http_header; classtype:attempted-recon; sid:200056936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"x2y2.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200056937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"x5b72-gqaaa-aaaad-qenga-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200056938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"x67tw337.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200056939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"x6s599.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xa2uzt.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xaaetpqyvw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xagoda365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xahuvgl.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xaoaiqgqqd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xbcfeimoql.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xcaretarte.kr"; content:"Host"; http_header; classtype:attempted-recon; sid:200056947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xccbhdwpqo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xcekdqqsiw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xcib5s.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200056950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xckfwsffsu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xclusivasexbrazz.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xcpoaxhbzp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xcptoiokzy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xczavyvpsy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xdamvtbzzw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xdefi-wallet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xdsyasixpn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xdxblgtaum.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xenangnguoivn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xeonusapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xetqlhypwh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xfcqsy.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200056963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xfeoxxokua9.typeform.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xfinity-mail-support-verification2.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xfinity-mail-support-verification4.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xfinniityinox.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xfzsolqkiw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xhctruexwf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xhmxawioyc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xiajsadjjj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xibupvwlun.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xifpbtgnxr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xijsqqslzc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xip-cakf-moqix.s3.nl-ams.scw.cloud"; content:"Host"; http_header; classtype:attempted-recon; sid:200056975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xiqflshtte.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xiscgkcaxz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xiwseqsokd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xjdj1x.hyperphp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xkgrftljou.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xkolqhrnsa.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xkrdytxief.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xlhcwtwbrz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xlowkzajhk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xlqpxcrcnd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xlsrfp.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xlsv.oalt.cfgliders.com."; content:"Host"; http_header; classtype:attempted-recon; sid:200056987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xlvosjykqj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xmndxvba.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xmsdlgqbfi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200056990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xmswsb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--62c0a5aayd1ah2eyb3i.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--80aaxgc7ajfdf0czf.xn--p1ai"; content:"Host"; http_header; classtype:attempted-recon; sid:200056993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--allgrolokalnie-x4b.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200056994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--amemelhorespreo-rmb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--artgobblrs-4q3e.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--azuk-8w5a.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--boredapeyachtclb-181i.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--boredapeyachtcub-ywc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200056999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--brav-jwa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--bur-kva.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--conta-atualiza-o-snb5e.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--en-yzs.domains"; content:"Host"; http_header; classtype:attempted-recon; sid:200057003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--es-pra.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--es-pxs.domains"; content:"Host"; http_header; classtype:attempted-recon; sid:200057005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--fastchage-hvb.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200057006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--feb.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200057007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--hastaykama-2ub.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--hbbo-bta.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--imagnaryones-tk6f.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--looksrar-bdb.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--looksrar-ceb.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--looksrre-5za.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--ltappen-80a.se"; content:"Host"; http_header; classtype:attempted-recon; sid:200057014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--metamsk-1wa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--metamsk-1wa.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200057016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--metmask-u3a.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--mise--jour-informations-84b.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--mtamask-ot4c.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--mtamask-rya.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--ns-9ia.domains"; content:"Host"; http_header; classtype:attempted-recon; sid:200057021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--opesea-yeb.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--othersid-140d.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--otheside-oub.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--quicksvvp-x1a.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--rarble-yk8b.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--saldo-ame-super-nkb.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200057027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--su-lja.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--trustwallt-zmb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--unlswp-tta.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--w1ai.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200057031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn34r.app.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xncquvescq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xnhmoxmqhw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xnieumbtry.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xnnudcrdlk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xnxxn7w8asd.liveblog365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xoihufobzi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xomyohiswl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xowomjrtcg.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xozddajkfk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xoztzaqbda.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xp1j5ju1.townd.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xpbztyzaki.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xprswebsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xq5807.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200057046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xqjatsazuk.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200057047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xqqvwexy.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200057048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xqsjthvbgl.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xqzjewjfpn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xrdxi-uqaaa-aaaad-qebla-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200057051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xrhdysyjvd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xrjkdkdted.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xryqskfzmx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xsbrookshhjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xserver.xpanel.co.jp.orcam.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200057056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xsportak1xsxrs.hostfree.pw"; content:"Host"; http_header; classtype:attempted-recon; sid:200057057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xsvzfwzjif.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xsyuetifud.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xtdss-5aaaa-aaaad-qenha-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200057060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xtfpgbznna.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xtgelnybom.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xtgev.inputgiant.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xtoguwohku.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xtpjlvgarq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xtrip-com.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xuiuxetxqp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xujxjoqksv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xuxwdbnevc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xuyoissozo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xuzzysaoff.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xv9wm9.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200057072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xvcbnmjhuytgfdfdgfrgfrhgtghe.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xvdf.w6eu6w86.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200057074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xvpagtjjbj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xvtfhn.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200057076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xw5gj8w5cc.knolllaundry.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200057077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xxcysq.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xxddxahjdf.herokuapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xxela0.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200057080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xxgyxoeynf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xxhdjfjfdj.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200057082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xxjudjddj.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200057083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xxkl.onedrive0001.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200057084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xxphase.office0.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200057085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xxpnbwespr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xxrvravokj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xxsb22.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200057088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xxvjgwgtkx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xxx-com-dot-c2c01-531c7.uc.r.appspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xxx-don-007.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xythndo.punctulcentral.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xyyzvliqgk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xzczxczxczxzxc.atwebpages.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xzfzgsrezr.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xzokefikgo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"y-n.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"y3fqmwx.yolasite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"y4me0s.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200057099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yachiyo-soba.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yaflyqebbz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yagnupakka.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahhhhmail.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahmaillll.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahmaillll9.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahmailllll60.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahmailllllll.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahmmmilllll.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yaho-omail.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahomailll.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoo-102124.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200057111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoo-102221-109948.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoo-102272.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoo-102677.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200057114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoo-103199.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoo-103633-101139.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoo-103772.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200057117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoo-106748.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoo-108255.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200057119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoo-109577-109141.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoo-att-104287.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoo-att-104809.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200057122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoo-att-106964.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200057123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoo-generall.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200057124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoo-jp.sx88.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200057125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoo-mail-101685.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoo-mail-103012.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoo-mail-103590.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoo-mail-105399.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoo-mail-105965.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200057130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoo-mail-108381.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200057131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoo-mail-security-check-1ab807.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200057132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoo-service-109311.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200057133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoo-team-109837-101810.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoo1982.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoocenter407.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoode-108495.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoomail893hj.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoomail894hlkm.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahooofficialmailcare.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahooserver657.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoosnet.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200057142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoosyncc.boxmode.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200057143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahpujzzwe.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahuomall.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200057145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahvoo5613.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yairix.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200057147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yakquubvpm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yalisport.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yalpwnfzsk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yanikao.space"; content:"Host"; http_header; classtype:attempted-recon; sid:200057151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yaqoobi.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yasdslyhpz.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200057153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yaundgapoluytahniuhas3124.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yawningweepymatter838373.bienvenidosos.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200057155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yaxrfu.onedrive0001.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200057156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yayanti.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yazioogubw.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yblmemvrfq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ybogctfdws.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ybwuofsrxo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ycdcusewhn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ycf27z.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200057163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yctdpcloym.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ycuooupptt.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yehypdjhna.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yeli89-pk7b.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yeli89-pk7b.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200057168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yemresahin.com.tr"; content:"Host"; http_header; classtype:attempted-recon; sid:200057169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yeogmmlsqc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yfatura-luiza-site.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yfbadjxkik.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yfyfgov.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yfywqggtin.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ygacxnmsxs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ygajvduwum.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ygqxpnfbjt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ygydwvyfzv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yh78.fg74.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200057179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yhcjzqluij.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yhskwmendh.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yhuvsksfwt.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yibjxwprwp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yimlqjverc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yipee.club"; content:"Host"; http_header; classtype:attempted-recon; sid:200057185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yiw7219whwu1791hjwnw9113nsjs.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yiwjxzfcjj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yixepxw.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200057188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yixiangceramics.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yj4ms5.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200057190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yjgvcrfngv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yjjyowawju.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yjjyzokefm.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yjmcmsunhb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yjmwowbjzq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yjohawgsvk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ykgcvivgbh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ykpmmwltqf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ylhkq-kqaaa-aaaad-qeapa-cai.raw.ic0.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200057199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ylrxdgtoju.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yma1ll0g0n.odoo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ymailatandt.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ymailusers3.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ymlvmoivrd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ymoydopxbd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yoakumginandfeed.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yodsecinserv.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yofsatjog.myportfolio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yogicpa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yogini-polygonbc.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yolunu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yotestlab.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"you.weebitbig.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"youapp.18-116-43-178.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"youn.bxxnskkdkdkrkrnfnf.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200057215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"your-invites.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200057216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yousee-refusion.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200057217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"youthful-swanson.85-214-143-134.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200057218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ypostsrcurepgsandrettes.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200057219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ypugmopnqz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yqxoonvvhb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yrcrnqjnps.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ysc.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200057223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ysmijwcdul.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ysmudyzpbe.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yspiojscjh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ysrdgifrai.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ysschakyhz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yten-9fd32.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yten-9fd32.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200057230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ytgdhteamsyp2.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ytjsczpsog.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ytjyhegf.byethost32.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ytnolhbsmy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ytokokyyhj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ytskyxqkti.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ytuj.h89euwyt.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200057237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ytymawnwwb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yuan5585.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yuan5586.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yuanluban.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200057241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yuio-173e9.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yurtcagdas.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yusr.ru.xsph.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200057244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yutourange.t.justns.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200057245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yuugjd.verification.com.captureyourforever.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yuyy-2a747.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yuyy-2a747.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200057248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ywqimwpukq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ywxo.mjt.lu"; content:"Host"; http_header; classtype:attempted-recon; sid:200057250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yxegezaqly.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yxfxupspvz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yxsvkjvepk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yxxdddscra.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yybvpbftky.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yydwrbxnbk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yyjnpdywzv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yyrjnxvezy.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yyrjnxvezy.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200057259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yyudy.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yyupzlykle.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yyy-109620.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200057262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yzxqkvpbcu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"z0naensegrura.pichincha--pe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"z0naensegrura.pinchlncha-pe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"z0naensegrura.plnchincha-pe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"z0nesegure-viabcpcontigobeta.englishtutorweb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"z56z.m367m.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200057268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zag.servess.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zagomail.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200057270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zaininger-weihnachtsmarkt.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200057271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zangeneh.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200057272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zanize.ztsmobiles.ml"; content:"Host"; http_header; classtype:attempted-recon; sid:200057273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zappervip.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zardoacabamentos.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200057275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zaunpo.ztsmobiles.ga"; content:"Host"; http_header; classtype:attempted-recon; sid:200057276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zazaza.yahoosites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zbhkgk.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zbseovdpyb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zcifaowddz.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zcsradlin.sk"; content:"Host"; http_header; classtype:attempted-recon; sid:200057281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zcwvbicdgy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zcxrhfjxbp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zcyndededf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zcyordduxk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zdenq.aprjust.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200057286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zdijyxwefb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zdurgnymku.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zealous-cliff-0a8252010.1.azurestaticapps.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200057289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zealous-saha.23-147-226-21.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200057290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zefibhwueo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zehdinbdzi.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zellepay21-bb87e.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zellepay21-bb87e.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200057294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zenshein.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zeriondapp.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200057296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zerione.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200057297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zevalogistic.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zewkwmmytd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zfdlzmwiza.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zftdggljnf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zfvo3x.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200057302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zfxzgjsndy.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zgdltkhlyo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zggepsgwpq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zgoqrxncln.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zgxtwmiqzu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zheard.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200057308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zhnezkgiav.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zhvkwnvgji.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zi0034034323.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200057311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zi992883923923.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200057312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zigmqmjokp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zionpeace.co.za"; content:"Host"; http_header; classtype:attempted-recon; sid:200057314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ziploc.staar0.repl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200057315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zjghkqn.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200057316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zk-reward.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zkin0s512d.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zkkbeib.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zkkeib.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zklcplynuc.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zkrsgisknx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zksyncairdrop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zksynci.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zksyncofficial.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zkx6bn.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200057326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zlcwubgsht.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zledgmkcib.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zltjsybtcs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zltqmwkadb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zltvtkqwul.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zmfjscihos.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zmmspdisoj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zmwxmrzlap.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"znzbxamddf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zobcreative.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zoisdqcdcf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zojmaqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zom.ink"; content:"Host"; http_header; classtype:attempted-recon; sid:200057339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zona.cajaspiura-pe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zonaeminent.server1.trinchera.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200057341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zonas-segura-piichinchape-com.club"; content:"Host"; http_header; classtype:attempted-recon; sid:200057342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zonaseguraspe.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200057343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zonaseguraspinchicha.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zonaseguravia.betabcp-pe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zonaspichiiinchaape-home-com.life"; content:"Host"; http_header; classtype:attempted-recon; sid:200057346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zonawsegura.betabcp-pe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zonddkuwei.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zotfmnvukp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zouqopovui.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zpenmsqqgn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zppcehqvml.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zprepay.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zqahckrfwe.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zqhzbkohbf.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zqtbsfykkn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zqtvcbzovp.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zrdmegbrcu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zrlbsoyetq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zrnlfpxocb.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zrwsx.rf.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200057361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zrxofzurvx.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zsngmaelgq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zt-bltkub-gv.1gb.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200057364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ztbzifaylh.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zthasibyzj.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ztowf4.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200057367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zuaqnkasug.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zurbrioerf.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zvdltlyfxd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zvdmuoqdmd.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zvmlyifafn.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zwktfdepae.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zwlojlmada.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zwphqeumbs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zwqxsualxo.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zwrvytguwa.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zx-kyber-swap-swap-acessoo-y0.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zxbfdvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zxmtjpbror.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zxunfsgniv.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zxvathfdj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zycvnarlkk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zygwld.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200057384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zylzpgzste.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zyyewnlhzq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zzam.agency"; content:"Host"; http_header; classtype:attempted-recon; sid:200057387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zzekeb.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zzju-59d0b.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zzju-59d0b.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200057390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zzkeb.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zzkibb.000webhostapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zzkxobobzs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zzpqccivio.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zzrslywryq.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zzxlobgzaa.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200057396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/secure01.chase/secure.php"; http_uri; nocase; content:"041fcf0.netsolhost.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bros/"; http_uri; nocase; content:"0nebet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/v3/signin/identifier?dsh=s-117173159:1666710317964590&continue=https://accounts.google.com/?&followup=https://accounts.google.com/?&passive=1209600&xrealip=107.178.238.56&flowname=glifwebsignin&flowentry=servicelogin&ifkv=aqdhywohgcl1c-pcoipyr_vptm3wknwj7hme-s0kp6vjqkj4clo_xhs5vxfyqvv352s9yljths3pma"; http_uri; nocase; content:"129.226.210.78"; content:"Host"; http_header; classtype:attempted-recon; sid:200057399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/o/s!bcxisnewh_cnvrnkj_y2f1eccpwq?e=gvtbd8pbpealap_ppbzgja&amp\;at=9"; http_uri; nocase; content:"1drv.ms"; content:"Host"; http_header; classtype:attempted-recon; sid:200057400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/u/s!agmp4dorn6rtdigau-azjczrdvg?e=3pg93q"; http_uri; nocase; content:"1drv.ms"; content:"Host"; http_header; classtype:attempted-recon; sid:200057401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/u/s!asazsxxj27tygrqveud6b2tyextk"; http_uri; nocase; content:"1drv.ms"; content:"Host"; http_header; classtype:attempted-recon; sid:200057402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/u/s!avqb_9face4sz3yjsonzujzcdvq8?e=hdbta4"; http_uri; nocase; content:"1drv.ms"; content:"Host"; http_header; classtype:attempted-recon; sid:200057403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/w/s!aqb1sjv7nuauan8etr6o4rb2z-8?e=siebms"; http_uri; nocase; content:"1drv.ms"; content:"Host"; http_header; classtype:attempted-recon; sid:200057404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?m=1"; http_uri; nocase; content:"1inchhelpcenter.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/go/?www.orange.orangao.c%cd%8fo%cd%8fm%cd%8f"; http_uri; nocase; content:"20khvylyn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bbva/592cf4/425bdbd3-91cf-4e9f-9498-7a06b3ad75ec/?test=1"; http_uri; nocase; content:"28ecne20f9u.securetnet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2f7rm4.txt"; http_uri; nocase; content:"2no.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200057408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6pcza"; http_uri; nocase; content:"3c5.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/gbzug"; http_uri; nocase; content:"3c5.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ijuwm"; http_uri; nocase; content:"3c5.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/kmvno"; http_uri; nocase; content:"3c5.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/z9642?confirmation-account-pages"; http_uri; nocase; content:"3c5.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/#email@example.com"; http_uri; nocase; content:"3g06evn69umh30akv77d87g7en50lkakdukabuo8bsof2tquuvfcs70.siasky.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200057414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-content/themes/3rdst/8-login-form/"; http_uri; nocase; content:"3rdstreetmarket.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/lizactivateaccnt/home"; http_uri; nocase; content:"543.sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/l0/https:%2f%2flnkd.in%2fgw2x_btv/1/01010181d5b4121d-ad8975c1-fc53-41b2-bad9-ecb97743ffd4-000000/p1odbvtfelzzx9amvwo_h954np8=278"; http_uri; nocase; content:"7b631qxp.r.us-west-2.awstrack.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200057417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/l0/https:%2f%2flnkd.in%2fgw2x_btv/1/01010181d603af46-160c71a9-c106-4e8a-8d41-5f8c8fea17a9-000000/c9_d4zic3z0jjatwzj75zswof1w=278"; http_uri; nocase; content:"7b631qxp.r.us-west-2.awstrack.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200057418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/l0/https:%2f%2flnkd.in%2fgw2x_btv/1/01010181d641f3ae-89c7fa59-82a2-4f6b-b2a4-cdc8626f95fa-000000/hyy7ncrmtxieavrn3px4goieeos=278"; http_uri; nocase; content:"7b631qxp.r.us-west-2.awstrack.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200057419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/l0/https:%2f%2flnkd.in%2fgzeded-9/1/01010181cf1b9616-bcd3d213-f58a-41c0-a6d5-6684bb69f8c4-000000/zraw1xg7um5rfbxqlmasuiteqri=277"; http_uri; nocase; content:"7b631qxp.r.us-west-2.awstrack.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200057420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/assets/css/api.php"; http_uri; nocase; content:"99mbet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/assets/img-temp/api.php"; http_uri; nocase; content:"99mbet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/assets/js/api.php"; http_uri; nocase; content:"99mbet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/openpc/directlogin.do"; http_uri; nocase; content:"a-q-f.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/id_1ftb3gemh_1ogg?utm=abcsubmit"; http_uri; nocase; content:"abcsubmit.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/id_1ftb7k8ik_11di?utm=abcsubmit"; http_uri; nocase; content:"abcsubmit.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/u/roland-richard-19"; http_uri; nocase; content:"account.venmo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/servicelogin?passive=1209600&continue=https://sites.google.com/view/viewbill-bt-1/bt&followup=https://sites.google.com/view/viewbill-bt-1/bt"; http_uri; nocase; content:"accounts.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/1lordman1man3/oscman.html&followup=https://storage.cloud.google.com/1lordman1man3/oscman.html"; http_uri; nocase; content:"accounts.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/1lordman1man3/oscman2.html&followup=https://storage.cloud.google.com/1lordman1man3/oscman2.html"; http_uri; nocase; content:"accounts.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/appspotv450i7r8h9vf9y6yt8uiuft58f7uf5yye36u0jtyf78uuyfyy/index.html&followup=https://storage.cloud.google.com/appspotv450i7r8h9vf9y6yt8uiuft58f7uf5yye36u0jtyf78uuyfyy/index.html"; http_uri; nocase; content:"accounts.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/employt44to49cclrlolcrl94lnlxo.appspot.com/index.html&followup=https://storage.cloud.google.com/employt44to49cclrlolcrl94lnlxo.appspot.com/index.html"; http_uri; nocase; content:"accounts.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/maintainancecomponeta.appspot.com/mineindex.html&followup=https://storage.cloud.google.com/maintainancecomponeta.appspot.com/mineindex.html"; http_uri; nocase; content:"accounts.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceaocon.aecsoaon.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceaon.aesocon.crknu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceaon.aesocon.kpvqlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeaan.aecsoecon.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeaan.aecsoecon.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeaaon.acesecocro.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeaaon.acesecocro.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeaaon.acesecocro.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeaaon.acesecocro.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeaaon.acesecocro.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeaeon.aesccocenon.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeaeon.aesccocenon.crknu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeaeon.aesccocenon.kpvqlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeeaeon.caeesccroceno.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeeaeon.caeesccroceno.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeeaeon.caeesccroceno.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeeaeon.caeesccroceno.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeean.aecsoecon.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeean.aecsoecon.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeean.aecsoeocnre.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeean.aecsoeocnre.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeeaon.aceseoccrone.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeeaon.aceseoccrone.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeeocon.aecsooencon.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeeon.aesocconen.crknu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeoa.aescooen.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeoa.aescooen.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeoa.aescooen.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeoa.aescooen.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeocon.aescoaoenn.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceeon.aesocon.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceocon.aesoaon.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceocon.aesoaon.crknu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceon.aesoon.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aceon.aesoon.kpvqlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?gclid=eaiaiqobchmigpmkizw9-givjllich1tra1peaayasaaegktjvd_bwe"; http_uri; nocase; content:"acesso-seudescontorenne.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?gclid=eaiaiqobchmi5snb6ole-givnhatbh2frwujeamyasaaegjzppd_bwe"; http_uri; nocase; content:"acessoempresarial-emilio.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?gclid=eaiaiqobchmi2ody24-0-givgt-rch2xqgxdeaayasaaegk3ffd_bwe"; http_uri; nocase; content:"aceus3fa20lu20.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?id=83"; http_uri; nocase; content:"adelisnews.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/en/bellcocreditunion/"; http_uri; nocase; content:"admin.fifoundry.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200057473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aecaocon.ascceaon.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aecaocon.ascceaon.crknu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aecaon.ascecon.kpvqlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeceaan.ascceecon.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeceaan.ascceecon.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeceaan.ascceecon.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeceaan.ascceecon.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeceoa.ascceoen.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeceoa.ascceoen.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeceoa.ascceoen.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeceoa.ascceoen.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeceoa.ascceoen.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aecocon.asceaon.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aecon.asceon.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeacon.asccecon.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeascn.asecccon.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeecaocon.asccceenaon.kpvqlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeecocon.ascceaoenn.kpvqlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeecocon.asceocon.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeecocon.asceocon.kpvqlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeecon.ascecon.kpvqlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeecon.asceocnen.crknu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeecon.asceocnen.kpvqlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeeaacn.acseecccro.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeeaacn.acseecccro.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeeaacn.acseecccro.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeeaacn.acseecccro.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeeaaon.acscececro.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeeaaon.acscececro.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeeascn.aseccccenon.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeecan.ascceecon.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeecan.ascceecon.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeecan.ascceeocnre.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeecan.ascceeocnre.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeecaon.acsceeccrone.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeecaon.acsceeccrone.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeecocon.ascceoencon.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeecocon.ascceoencon.crknu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeecon.ascecconen.crknu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeeeacn.acseecccrone.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeeeacn.acseecccrone.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeeeacn.acseecccrone.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeeeacn.acseecccrone.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeeeacon.casecccreceno.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeeeaon.acsceeccrone.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeeeaon.acsceeccrone.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeeeaon.acsceeccrone.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeeeascn.caseeccrcceno.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeeeascn.caseeccrcceno.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeeeascn.caseeccrcceno.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeeeascn.caseeccrcceno.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeesacn.acseecccrone.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeesacn.acseecccrone.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeesacn.acseecccrone.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeesan.ascececon.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeesan.ascececon.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeesan.ascececon.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeesan.asceceocnre.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeesan.asceceocnre.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeesan.asceceocnre.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeeesan.asceceocnre.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeesaccon.asccecenaon.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeesaccon.asccecenaon.kpvqlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeesacn.aseccconen.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeesccon.aseccaoenn.crknu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeescn.aseccon.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeescn.asecocnen.crknu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeesoccn.asecocon.kpvqlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aesaccon.ascecaon.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aesaccon.ascecaon.crknu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aesacn.aseccon.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aesccon.asecaon.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aesccon.asecaon.kpvqlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeseaan.ascececon.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeseaan.ascececon.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeseca.aseccoen.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aeseca.aseccoen.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/uwbrvz8quj/page1.php"; http_uri; nocase; content:"aesoioesn.aseoseiseaccn.uqmzwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/uwbrvz8quj/page1.php"; http_uri; nocase; content:"aesoosesn.aseoseesceacn.uqmzwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-admin/ent.com.html"; http_uri; nocase; content:"aestheticclinicgroup.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2005/03/colourful-life-of-aij.html"; http_uri; nocase; content:"aijcs.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/svxc/index1.php"; http_uri; nocase; content:"aiousolvedassignment.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/yonetici/newdocs/gdoccc/"; http_uri; nocase; content:"aksehirevdenevenakliyat.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ch/"; http_uri; nocase; content:"albgomezo.bravehost.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ats.html"; http_uri; nocase; content:"allfurnist.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/#redacted@ionos.com"; http_uri; nocase; content:"alqesqlcwwly-dot-pankasynose.ue.r.appspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/americanas/carrinho/"; http_uri; nocase; content:"ampedidossuamet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/btconnect2y1yy"; http_uri; nocase; content:"ampl.ink"; content:"Host"; http_header; classtype:attempted-recon; sid:200057561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/btconnect2yjpg"; http_uri; nocase; content:"ampl.ink"; content:"Host"; http_header; classtype:attempted-recon; sid:200057562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/btconnectggj8l"; http_uri; nocase; content:"ampl.ink"; content:"Host"; http_header; classtype:attempted-recon; sid:200057563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/btconnectmail2y1bj"; http_uri; nocase; content:"ampl.ink"; content:"Host"; http_header; classtype:attempted-recon; sid:200057564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/btconnectv3zry"; http_uri; nocase; content:"ampl.ink"; content:"Host"; http_header; classtype:attempted-recon; sid:200057565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fine2207/buckley.htm"; http_uri; nocase; content:"ams3.digitaloceanspaces.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-content/fonts/cairo/main/loading1"; http_uri; nocase; content:"amzfort.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-content/fonts/cairo/main/p"; http_uri; nocase; content:"amzfort.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-content/fonts/cairo/main/result"; http_uri; nocase; content:"amzfort.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-content/fonts/cairo/main/ss"; http_uri; nocase; content:"amzfort.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-content/fonts/cairo/main/verifyinfos"; http_uri; nocase; content:"amzfort.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?utm_source=mn0uvd&utm_medium=facebook_desktop_feed&utm_campaign=pen5&utm_content=farm_a5149auto5_7809&pxl=1554083528361581&pid=mn0uvd&jhwyuiwen=674534"; http_uri; nocase; content:"anthillant.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page?lid=llz7stlst4hl-lw5mwvd6a2"; http_uri; nocase; content:"api.elasticemail.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/message/c3upfo4mvzsgg1?autoload=1&amp\;app_absent=0"; http_uri; nocase; content:"api.whatsapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/s/x6agocx9zvj049azirk4aw3xrqdedqhl"; http_uri; nocase; content:"app.box.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/s/ymr0ltw3hmn8icxebz16gjhcyhqa49w4"; http_uri; nocase; content:"app.box.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/document/27bcdebd7736cefa2575f4f56d1439096536f544"; http_uri; nocase; content:"app.pandadoc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/p/064ca177fcb7d3b79b1a0de5fb00ade981aeff90?"; http_uri; nocase; content:"app.pandadoc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/p/26bcb52213a6d759d76014ff4e11c37cae6ae56c"; http_uri; nocase; content:"app.pandadoc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/p/27bcdebd7736cefa2575f4f56d1439096536f544"; http_uri; nocase; content:"app.pandadoc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/abg7_xbalh"; http_uri; nocase; content:"appurl.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200057581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/kektfripag"; http_uri; nocase; content:"appurl.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200057582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/.well-known/sbb-ch/anti/torsion/"; http_uri; nocase; content:"aromasgt.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseaeon.acscecso.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseaeon.acscecso.crknu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseaeon.acscecso.kpvqlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseaocon.accseaso.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseeaan.accseecso.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseeaan.accseecso.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseeaan.accseecso.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseeaaon.accsececrs.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseeaeon.acsccecenso.kpvqlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseeaocon.acccseenaso.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseeaocon.acccseenaso.crknu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseeeaeon.cacesccrecens.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseeeaeon.cacesccrecens.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseeean.accseecso.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseeean.accseecso.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseeean.accseescore.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseeean.accseescore.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseeeaon.accseeccrsoe.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseeeaon.accseeccrsoe.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseeeon.acseccsoen.kpvqlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseeoa.acsceseo.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseeoa.acsceseo.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseeoa.acsceseo.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseeoa.acsceseo.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseeocon.acsceaseno.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseeon.acsecso.crknu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseeon.acsescoen.kpvqlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseocon.acseaso.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseocon.acseaso.kpvqlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page1.php"; http_uri; nocase; content:"aseon.acseso.awvu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/asdf/fixed0/index.php"; http_uri; nocase; content:"atpproduct.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mkj/fixed0/index.php"; http_uri; nocase; content:"atpproduct.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mkj/fixed0/index.php?user=user@domain.tld"; http_uri; nocase; content:"atpproduct.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/shop/v1/?vn=ctv-tfnlinkbot-pc4-cos-usr-bdl2-alt-wrl-wrle-cc1-cic-cf4-dpf&chatmessage=false&slidechat=false"; http_uri; nocase; content:"att-promotions.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paacny.aeeucaeaomceoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paacoy.aueccaaomceoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paacy.aeucoaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paacy.auccaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paaoy.auccaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paaoy.auccaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paaoy.auccaom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacccy.aeeseacoaocmeoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacccy.aeeseacoaocmeoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacccy.aueseacaomceoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccey.aeeauasoaocmeoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccey.aeeseasoaocmeoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccey.aueseasaomceoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccny.aeeauaceaocmeoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccny.aueseacaomceoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccny.aueseacaomceoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccoy.aeeauaccaocmeoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccoy.aeeauaccaocmeoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccoy.aeeseaccaocmeoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccoy.aueseacaemceoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccoy.aueseacaemceoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccoy.aueseacaomceoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccy.aceeseacraocmeoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccy.aceeseaeraocmeoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccy.aceeseaeraocmeoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccy.aceeseaoraocmeoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccy.aceeseaoraocmeoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccy.aeaucoaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccy.aesecoaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccy.aesecoaom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccy.aeueseaeaomceoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccy.aeueseaoaomceoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccy.aeueseaoaomceoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccy.ausecaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccy.ausecaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccy.ausecaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paccy.ausecaom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacey.aeausoaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacey.aeausoaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacey.aeausoaom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacey.aesesoaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacey.aesesoaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacey.aesesoaom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacey.ausesaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacey.ausesaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacey.ausesaom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacny.aeauceaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacny.aeauceaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacny.aeauceaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacny.aeauceaom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacny.aeseceaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacny.aeseceaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacny.aeseceaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacny.aeseceaom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacny.ausecaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacny.ausecaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacoy.aeauccaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacoy.aeauccaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacoy.aeauccaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacoy.aeauccaom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacoy.aeseccaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacoy.aeseccaom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacoy.ausecaem.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacoy.ausecaem.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacoy.ausecaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacoy.ausecaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacoy.ausecaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacoy.ausecaom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacy.acesecraom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacy.acesecraom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacy.acesecraom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacy.aceseeraom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacy.aceseeraom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacy.aceseeraom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacy.aceseoraom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacy.aceseoraom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacy.aeucoaom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacy.aeusecaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pacy.aeuseoaom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paecy.aeuesoaaomceoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paey.aceuoraom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pancy.aceeuearaomceoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pany.aceueraom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paoy.aceucraom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paoy.aeuccaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-paoy.aeuccaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payaccy.accaomaoy.xnsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payacey.acsaomaoy.egpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payacey.acsaomaoy.txhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payacey.acsaomaoy.xvmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payacey.ausaaoaeoy.hfmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payacny.accaomaoy.txhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payacny.accaomaoy.xnsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payacny.accaomaoy.xvmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payacoy.accaomaoy.hfmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payacoy.aucaaoaeoy.aufu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payacoy.aucaaoaeoy.hfmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payacoy.aucaaoaeoy.xvmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payccey.aauaoaameoy.xnsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payccey.aauaoaameoy.xvmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payccny.aauaeaameoy.xvmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payccny.aseaaoaeoy.txhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payccoy.aauacaameoy.aufu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payccoy.aseaaeaeoy.aufu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payccoy.aseaaeaeoy.egpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payccoy.aseaaeaeoy.hfmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payccoy.aseaaoaeoy.txhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payccy.acuoaaoaeoy.xnsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payccy.acuoaaoaeoy.xvmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payccy.aeseaaoaeoy.hfmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payccy.aeseaaoaeoy.txhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payncy.acueaaoaeoy.egpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payncy.aeceaomaoy.aufu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payncy.aeceaomaoy.egpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-payocy.acucaaoaeoy.xnsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcccny.aeeauasaaocmeoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcccny.aeeseacaaocmeoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcccny.aeeseacaaocmeoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcccny.aeeseasaaocmeoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcccny.aueseacaomceoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcccoy.aueseacaemceoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcccy.aceeseaaraocmeoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcccy.aceeseaaraocmeoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcccy.aeueseaaaomceoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcccy.aeueseaaaomceoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pccny.aeausaaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pccny.aeausaaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pccny.aeausaaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pccny.aeausaaom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pccny.aesecaaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pccny.aesecaaom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pccny.aesesaaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pccny.aesesaaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pccny.aesesaaom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pccny.ausecaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pccny.ausecaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pccny.ausesaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pccny.ausesaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pccny.ausesaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pccny.ausesaom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pccoy.ausecaem.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pccoy.ausecaem.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pccoy.ausecaem.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pccy.acesearaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pccy.acesearaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pccy.acesearaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pccy.acesearaom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pccy.aeuseaaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pccy.aeuseaaom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcncy.aeuecaaaomceoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcncy.aeuecaaaomceoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcny.aeucaaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcny.aeusaaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcyacny.accaomaoy.hfmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcyacny.acsaomaoy.egpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcyacny.acsaomaoy.txhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcyacny.aucaaoaeoy.egpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcyacny.ausaaoaeoy.egpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcyccny.aauaaaameoy.aufu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcyccny.aauaaaameoy.txhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcyccny.aseaaaameoy.hfmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcyccoy.aseaaeaeoy.hfmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcyccoy.aseaaeaeoy.txhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcyncy.aecaaomaoy.egpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcyncy.aecaaomaoy.xnsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcyncy.aesaaomaoy.egpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pcyncy.aesaaomaoy.hfmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poaay.aeuccaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poaay.aeuccaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poaay.aeusoaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poaay.aeusoaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poaay.aucsaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poacay.aeeucacaomceoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poacay.aeeusaoaomceoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poacay.auecsaaomceoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poacy.aceeucaraomceoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poacy.aceeuearaomceoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poacy.aeueccaaomceoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poay.aceucraom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poay.aceueraom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poay.aceueraom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poay.aeuccaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poay.aeuccaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poay.aeuceaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poay.aeucoaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poay.aeusoaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poay.aeusoaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poay.aeusoaom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocay.aeauccaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocay.aeauceaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocay.aeauceaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocay.aeaucoaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocay.aeaucoaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocay.aeausoaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocay.aeausoaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocay.aeausoaom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocay.aeseccaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocay.aeseccaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocay.aeseceaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocay.aeseceaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocay.aesecoaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocay.aesecoaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocay.aesecoaom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocay.aesesoaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocay.aesesoaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocay.aesesoaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocay.ausecaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocay.ausecaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocay.ausesaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocay.ausesaom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poccay.aeeauaccaocmeoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poccay.aeeauaccaocmeoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poccay.aeeauacoaocmeoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poccay.aeeauasoaocmeoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poccay.aeeseaccaocmeoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poccay.aeeseaceaocmeoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poccay.aeeseasoaocmeoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poccay.aueseacaomceoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poccay.aueseacaomceoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poccay.aueseasaomceoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poccay.aueseasaomceoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poccy.aceeseacraocmeoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poccy.aceeseacraocmeoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poccy.aceeseaeraocmeoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poccy.aceeseaoraocmeoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poccy.aceeseaoraocmeoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poccy.aeueseacaomceoy.hcfugu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poccy.aeueseacaomceoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poccy.aeueseaeaomceoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poccy.aeueseaoaomceoy.sdnrfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocoy.ausecaem.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocoy.ausecaem.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocoy.ausecaem.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocoy.ausecaem.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocy.acesecraom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocy.acesecraom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocy.acesecraom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocy.acesecraom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocy.aceseeraom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocy.aceseeraom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocy.aceseeraom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocy.aceseoraom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocy.aceseoraom.fegcyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocy.aceseoraom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocy.aceseoraom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocy.aeusecaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocy.aeusecaom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocy.aeuseeaom.edckgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocy.aeuseeaom.merivz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-pocy.aeuseeaom.ujldtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poyacay.accaomaoy.xvmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poyacay.acsaomaoy.xvmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poyacy.acucaaoaeoy.hfmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poyacy.acueaaoaeoy.xnsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poyacy.acuoaaoaeoy.egpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poyacy.acuoaaoaeoy.hfmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poyacy.aeccaomaoy.aufu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poyacy.aeccaomaoy.xvmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poyacy.aeceaomaoy.hfmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poyacy.aeceaomaoy.txhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poyacy.aecoaomaoy.aufu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poyacy.aecoaomaoy.egpu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poyacy.aesoaomaoy.xnsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poyccay.aauaeaameoy.aufu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poyccay.aauaoaameoy.xnsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poyccay.aauaoaameoy.xvmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poyccay.aseaaoaeoy.txhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poyccay.aseacaameoy.aufu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poyccay.aseaeaameoy.aufu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poyccay.aseaeaameoy.xnsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poyccay.aseaeaameoy.xvmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au/page1.php"; http_uri; nocase; content:"au-poyccay.aseaoaameoy.hfmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au6895152/contract/"; http_uri; nocase; content:"aymaraalpaca.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?m=0"; http_uri; nocase; content:"azeioaz.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/renew.html"; http_uri; nocase; content:"bafybeia5imvzzwfrwftphhefqf76avslcqdzfhsiev7dcdr7kwzslzohya.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/gracefinir_cham-e7484748.html"; http_uri; nocase; content:"bafybeiab5w6nt6pfnohevsoxu25l26p2v6g2sfgcdw6fetyhnp7fyuammi.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/xxtr.html"; http_uri; nocase; content:"bafybeiaekosrw7vw7kbp4vi2b2uuwklki443zdj77njc55ogpxmo2mtiji.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/password.html"; http_uri; nocase; content:"bafybeiaiarrupqqwhddsk7r62hr656rhhjh4v7h5wuzikatyajvu3bt3ku.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/index1.html"; http_uri; nocase; content:"bafybeiammrxgy5hmkujkh6fbhwht3t7bsdsrza73awma6zlh5bvjskop7u.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/way.html"; http_uri; nocase; content:"bafybeiap2yx4p7g76csly24wyzpjpypgfmoey3qrx4mbvb5ccllgnvcbtm.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/neq.html"; http_uri; nocase; content:"bafybeiapz2oerosoiimzhhhnahfxcp7fjjb6mvbfyh2zy7pa7wuev45vmq.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/003.html"; http_uri; nocase; content:"bafybeiaseiccnilblsdusmrkofxzzedulqsti52qjejstblyi7oj2ritqq.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/hhhhh.html"; http_uri; nocase; content:"bafybeiazn2hvyj2lp5ckxnzitbzit2hyvewzxpadzeinh4i42wp27pkpve.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2authlogin.html"; http_uri; nocase; content:"bafybeib6mnx5nza4tvcm64kuq6a5pcjyw7doftqeveuk22tpf5l53apqsm.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/reloading.html"; http_uri; nocase; content:"bafybeibbtehxiwdhnjh4l7uww6ojprq6vmz5i5upykkjlegb6xysncjjai.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cpanelwebmail-hash.html"; http_uri; nocase; content:"bafybeibpbuo65bxuuswrtw24p4ao5lrgz6t2arxys43xxwysmrlvf46un4.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/699.shtml"; http_uri; nocase; content:"bafybeibqomdox6aocyyfq6ayxguhdmff7dezb6tzafnrsswcjryxof3sfm.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/zpvx.html"; http_uri; nocase; content:"bafybeibsu27l2ndw3cputi5n7awa4oxxf2xbcuumwgktjkyqzn3gl6ph3i.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/alishanawza_.htm"; http_uri; nocase; content:"bafybeibxmj6gxyqf3n5nollz6stmvfxlmi6ut7rj52q6wytzy6ctg5kugi.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2ss.shtml"; http_uri; nocase; content:"bafybeibyz2faw6djx3xr6musqwp3jrooph5cycifylle6lw54fx4udjrhq.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b11w.shtml"; http_uri; nocase; content:"bafybeic3dts55qvflp5dhe6jfmup2nx7aop6vasgqltkeqj5sptisqfmau.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/save.html"; http_uri; nocase; content:"bafybeic4tzieegmwhwjthbsljp5act7obbcs62p2xyd4p54hamvea3btp4.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/brapo.html"; http_uri; nocase; content:"bafybeicd2g3q2kigmyymienzmh42y4zazhgbjbjaz2flolti4zwiaihurm.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ready.html"; http_uri; nocase; content:"bafybeicf6h3nvvpu7tjzrlo6sxdi4rkxhr535rb264spdjt3f3ed2pba74.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wash.html"; http_uri; nocase; content:"bafybeicj6qnmzro4rq5lqbqx4l2n5bobp3phwl7rmpdnogkoeagjabbcly.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/neww.html"; http_uri; nocase; content:"bafybeickidjvwx3govufb7xp7273sqx3anol27vvmc2d5tlw6lzbnebxti.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/11.html?fondos@bancopatagonia.com.ar+"; http_uri; nocase; content:"bafybeicleia5sx5elbtmg5nmrv3lwkupbji2wswwgv6i7wsenle2aphziy.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/live.html"; http_uri; nocase; content:"bafybeicpe5g5s3a473z5owlcdibwtcgvda3xl3dee7nopkhahrgxowlk2u.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/continue.html"; http_uri; nocase; content:"bafybeictqolvjpybizuyw52pygv4aplgz2zojmsn4optk42nc2wvrjnxv4.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/htm.html"; http_uri; nocase; content:"bafybeicukxxyioavcfzksokz3udeo6xh7q6bfftpyoksbopvlehcwhuydy.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fresbaze.html#"; http_uri; nocase; content:"bafybeicx632kovolcmtykzyzsmgbl3uxxxsplyazgvwb2adw7pxbxuyfre.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/rxl.html"; http_uri; nocase; content:"bafybeid4ma3mhvevznd5gjtotvvumudbblptvunewnnsn7ltb22eeqzlja.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/worrie.html"; http_uri; nocase; content:"bafybeid54hc3gffgs7f67dym7q6jzr2jpyjn7m7w2a32nob5cfbynzwmtm.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/alphash_cham-e00.html"; http_uri; nocase; content:"bafybeida3c3nekpk2nctanrr5qh3ywgcdudmmh74vq2sckzbvi3yysyve4.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/save.html"; http_uri; nocase; content:"bafybeidcyrem6t6wud2mnoqp2tnukkzh5gzzmsitjomu7hji3izizjvaya.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/drtefrch1.html/#noc@cloudflare.com"; http_uri; nocase; content:"bafybeiddudfmh47urgf7mayxqn3otetcsqgfkr3wjl4lgfc7xk6nxz4rku.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/saved.html"; http_uri; nocase; content:"bafybeidgbsibxbcj5mtaitzks35qrl32a5ojkeqam3qkdy3vfqi55mo7ke.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/indexxx.html?eml=x@x.com"; http_uri; nocase; content:"bafybeidgkwzxllclpkvkpd7wjiy5flgc55ue5wappbo5jn77e3p3thkxwu.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/blessow.html#(x@x-x.com)"; http_uri; nocase; content:"bafybeidh2pgamntpffcj7uelqjrjkhxlasysb5viiahrghrpfcve7df2ce.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/his.wi_cham-e.html#eva.fucikova@mff.cuni.cz"; http_uri; nocase; content:"bafybeidhtpz4lxjstgvzseju53fh5ytyl4if7tdb2v3pa2itfn67eroixa.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wc1.html"; http_uri; nocase; content:"bafybeidjf7kie7rbl47dvjch5y4xabcdf4syvobobaxzc7cv255wev4hia.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/#x@x.com"; http_uri; nocase; content:"bafybeidjnazy2ugmcqpt4dray4mbjqxgrzrxzwxuwzgin222qv3tvzrlk4.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/v.trudi_cham-e853465669.html#a@b.com"; http_uri; nocase; content:"bafybeidm3q3fkkvx45zja6s6pha6k2fpiobingnjafwy4ka62dxebbevy4.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jal.html/#noc@cloudflare.com"; http_uri; nocase; content:"bafybeidori6vu5e5omqqhqeucnnx7ejixtnruykugtqbq5yfxk36u7dwrq.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/y1200.shtml"; http_uri; nocase; content:"bafybeidreebllzbjdj5s7rgwtlowza5j4rsrmvfornbbw2fczkawb7xtzu.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mondaywrap.html"; http_uri; nocase; content:"bafybeidu7dboc5ywfgzefrk5dwrqcimvzmhkkrt3nklu6fn5x3kd6g3ugu.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k32.shtml"; http_uri; nocase; content:"bafybeidys6dcwdjexyu3juqtnijbatuk3mn3m2fefv7fy5m47hvx5axk3a.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/offtyj.eur_cham-e.html#info@tritontechnical.com"; http_uri; nocase; content:"bafybeie347ua4igosgobn765co7s3foo25bev3vwnemmie2wyuzalvcezm.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f1222.shtml"; http_uri; nocase; content:"bafybeie4pqchsdskydczfwraul6oeggd4bkxaircuji7iplxgtukyit6ry.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/s102.html"; http_uri; nocase; content:"bafybeie65amukh66hjnvhctctgswrcri7qdbwgfgxssghcntdgi6kt5azm.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/560.shtml?+"; http_uri; nocase; content:"bafybeiebzt2muanjrqygfp2mjew3kbkwjnn6i424tigu66c46dfnaiuiau.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/xxxx3g.htm"; http_uri; nocase; content:"bafybeiec527kvbqldn7vf7gtvfgjbprzplgpqvprwgwp2v6gqkcgr5oypm.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/continue.html"; http_uri; nocase; content:"bafybeiecx36zyvqm2svhnjj3le6itmuqgni3n74rtbw23lhaztuzyyxkoi.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/indexfavour.html#x@x.com"; http_uri; nocase; content:"bafybeieic57lxylxxr264ilclmqyo37xggvzunlz3lbtibb6zfzjntocmi.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/aymt.html/"; http_uri; nocase; content:"bafybeiemrqmrwml4ecdnyald5jsipavzsc6n3cfv344alveuvbwgquyw3q.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/004991.shtml?+"; http_uri; nocase; content:"bafybeiep5goyycxwdpzkrlh3tsfo3szfdmin4jfodzzqp4u6zyvd6gy734.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/nuu.html"; http_uri; nocase; content:"bafybeievvrvnyumx5g4lvslsrhwbf6czagwymnfnbqyo5qe256l6kinvtu.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/outllok-offipce-page.html"; http_uri; nocase; content:"bafybeif2x6up5hdiv3or4pymesbnnwq5qj4tcbyjne35ysficzw6xy7hby.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jongil004_owa87687.html#x@x.com"; http_uri; nocase; content:"bafybeif4vdezumtacce6tjxpcldor4vlrbpro365i6nxiiuc6hkc75m32u.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/asb.html"; http_uri; nocase; content:"bafybeif5da5uioyg7zqeiciidlid2yp5pkrwmolqm3mtw2qlhwfsr4feu4.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/save.html"; http_uri; nocase; content:"bafybeif6q22os2bvb6sx7a63ccq2io4v2lyuwjgzxofk4rsg3if2kse4li.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/azgwo_cham-e263868.html#compras@enercomcr.com&amp\;sa=d&amp\;sntz=1&amp\;usg=aovvaw0q00zj4nayypqw-mfritei"; http_uri; nocase; content:"bafybeifdyyowrw4p6e5sf52krlvnk7xjrjwhf5qioxoweutgmzcfsmgvym.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fab.html"; http_uri; nocase; content:"bafybeife42d6n2mrsue5tw4pzofwihzciiuydqrl6xgae6ndapakv4la6m.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/officeonedrivehtml.html"; http_uri; nocase; content:"bafybeifenqc5dv5bp3wibnrukqjx334bouavrzelldan26fl6oittcb2aa.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/authrenewi.html"; http_uri; nocase; content:"bafybeifesx6kibkoouyfnhpdf7txkjhytskkkktc6h4ryqqxzgusczqc7e.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/indexdms1.html#spam@uce.gov"; http_uri; nocase; content:"bafybeifewwiqtog5qg3wdv2tmucylklfebapocxojymqmvd7szelqkpy6e.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cling.html"; http_uri; nocase; content:"bafybeifnoafq7gyuextvvwgoc7kz474vwpggrsz3hzr7xgucqrncxk7ucy.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/neq.html"; http_uri; nocase; content:"bafybeift4xef537x3ypwc4wdjko5nf2yxp2uncqlbpfm7t3ulskzfrryde.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/zid.html#x@x.com"; http_uri; nocase; content:"bafybeifxd6o6l6zxxlfhkicupip4vbwioybmlblzmhwibvtxsj5arwkdxy.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/gbala.html"; http_uri; nocase; content:"bafybeifxregwx7ckesn3j7fqinsiszr2pfhvztma5lqmrlecfy4ua2myeu.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/zijfgdf.html"; http_uri; nocase; content:"bafybeify6csa3gts7ipz2xrajtsptnfkv4bf7lih24uxolj2roae343xcq.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/autheee.html"; http_uri; nocase; content:"bafybeig2wn5wiojf26vq4u4qqnldeikick5y5ghzi56fr4cm7pxo7zzjxy.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/n090.shtml"; http_uri; nocase; content:"bafybeig5u76njlbuazn6xgov4tz7aa6wlxeldyca5ef7rgjfml4q5bgo2u.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/autheen.html"; http_uri; nocase; content:"bafybeig6disqt73ababcruyzjejqflkoqrkoieftidcnt253e33fchjc34.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cashout2_cham-e373037.html"; http_uri; nocase; content:"bafybeigafk6a767ca2kpmojydsrdeo3px3ykc6fvhs7rgvow2yeaumxcf4.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/savedluck.html"; http_uri; nocase; content:"bafybeigfjxykisf2ejboaxwnjjz7cipokg66tfqmwn3zjxmay33bdvwc5q.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/index.html"; http_uri; nocase; content:"bafybeigg77t2z6bbaieukzaprj43a5admasyhdz5dv3kggvwk6lmlbip3a.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/index.html/"; http_uri; nocase; content:"bafybeigg77t2z6bbaieukzaprj43a5admasyhdz5dv3kggvwk6lmlbip3a.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/xxys.html"; http_uri; nocase; content:"bafybeiggzccwtuedcrqxjum7ebe4ftx53ukux6ilqbwlujivkt3p2uedzu.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/settings.html"; http_uri; nocase; content:"bafybeighh7ifnujitqpdi3aelv66lq3rkssnsgp76rk7rlnlzwkvmsmo2m.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/settings.html"; http_uri; nocase; content:"bafybeiglngevnd4qp2fcotpco5x3qlxbiavnqu4mact6gf5gazwf6b67se.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/767566757676.htm"; http_uri; nocase; content:"bafybeigrbduiiweha3vkuvrwhvlupaqosvmrco7ptsd3pbbsnmg6te7f7q.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/setting.html"; http_uri; nocase; content:"bafybeigtijvjfix4li253tipqenuoa7morqmv4jzyd42a4gx7ba6gdklly.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/30093a.shtml"; http_uri; nocase; content:"bafybeigw5jlwvykqqwfwiz7bykja2imjyes2ouyl57dd33vpydeip4efgy.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/auth5thlogin.html"; http_uri; nocase; content:"bafybeigwim5u7akvvmgsc6uzd7pc2qxynk7lpmnotmmbgia6t3facvy6ku.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/continue.html"; http_uri; nocase; content:"bafybeihbem6hsfignhjjqfec7ge26ag3mgigcdlxpawezygh7fuud7imwa.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/snookieresu_cham-eb4783.html"; http_uri; nocase; content:"bafybeihhxs532e266hgqfwmeuzrqglpyqfakakzottaujjlmm3zalrwjie.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/keepingnow.html"; http_uri; nocase; content:"bafybeihqfj53zcvso6ed6wlphdun2qqzrf3e5fqte2m4rrxh5knwtemoli.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/sgsgsslsksvsvss.html"; http_uri; nocase; content:"bafybeihuka4pp5vopmks5vxf6krrm4lealdxd62hufmsz2jzdylfrmnl34.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/savedluck.html"; http_uri; nocase; content:"bafybeihxamaulr5e5u4cqw4izdtcyznb6xdw4hojvryrjsp7dh3nua7hye.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200057977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-admin/js/api-gantengz.php?key"; http_uri; nocase; content:"bardestani-carpet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-includes/css/apicuy.php?key"; http_uri; nocase; content:"bardestani-carpet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/homebtlogin"; http_uri; nocase; content:"beacons.ai"; content:"Host"; http_header; classtype:attempted-recon; sid:200057980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/sbcglobal"; http_uri; nocase; content:"beacons.ai"; content:"Host"; http_header; classtype:attempted-recon; sid:200057981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/pages"; http_uri; nocase; content:"bendigo-online-account.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-content/themes/chpost/ch/?pwd=post"; http_uri; nocase; content:"bestdoctors.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-content/themes/chpost/ch/clients/details.php?verification#_"; http_uri; nocase; content:"bestdoctors.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cpround/cpwebmail/"; http_uri; nocase; content:"bestdoggroomingequipment.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/vendor/phpunit/phpunit/src/runner/filter/?id=65"; http_uri; nocase; content:"bestquotesabout.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/service/"; http_uri; nocase; content:"bhaskarpant.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200057987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?bfp"; http_uri; nocase; content:"binance.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200057988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/en/?bfp"; http_uri; nocase; content:"binance.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200057989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?bfp"; http_uri; nocase; content:"binancezh.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200057990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?bfp"; http_uri; nocase; content:"binancezh.sh"; content:"Host"; http_header; classtype:attempted-recon; sid:200057991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?bfp"; http_uri; nocase; content:"binancezh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/zh-cn/?bfp"; http_uri; nocase; content:"binancezh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200057993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/h67yt2"; http_uri; nocase; content:"bio.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200057994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/safraportal"; http_uri; nocase; content:"biolinky.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200057995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0034254243hhg?email=okperez@bpd.com.do"; http_uri; nocase; content:"bit.do"; content:"Host"; http_header; classtype:attempted-recon; sid:200057996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fuvgz"; http_uri; nocase; content:"bit.do"; content:"Host"; http_header; classtype:attempted-recon; sid:200057997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fvdca"; http_uri; nocase; content:"bit.do"; content:"Host"; http_header; classtype:attempted-recon; sid:200057998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fveke"; http_uri; nocase; content:"bit.do"; content:"Host"; http_header; classtype:attempted-recon; sid:200057999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fvfqp"; http_uri; nocase; content:"bit.do"; content:"Host"; http_header; classtype:attempted-recon; sid:200058000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fvgrk"; http_uri; nocase; content:"bit.do"; content:"Host"; http_header; classtype:attempted-recon; sid:200058001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fvieb"; http_uri; nocase; content:"bit.do"; content:"Host"; http_header; classtype:attempted-recon; sid:200058002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/nab-signin"; http_uri; nocase; content:"bit.do"; content:"Host"; http_header; classtype:attempted-recon; sid:200058003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/numitisi"; http_uri; nocase; content:"bit.do"; content:"Host"; http_header; classtype:attempted-recon; sid:200058004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/osrsgiveaway"; http_uri; nocase; content:"bit.do"; content:"Host"; http_header; classtype:attempted-recon; sid:200058005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3ijwsm2"; http_uri; nocase; content:"bit.ly."; content:"Host"; http_header; classtype:attempted-recon; sid:200058006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2zejaht"; http_uri; nocase; content:"bit.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/34hdmyt"; http_uri; nocase; content:"bit.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/366qkes"; http_uri; nocase; content:"bit.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3ccqacg"; http_uri; nocase; content:"bit.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3dj0r1p"; http_uri; nocase; content:"bit.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3e8kw2o"; http_uri; nocase; content:"bit.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3fz5tbd"; http_uri; nocase; content:"bit.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3kueruz"; http_uri; nocase; content:"bit.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3ldovbh"; http_uri; nocase; content:"bit.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3qplrme"; http_uri; nocase; content:"bit.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3rtrv8a"; http_uri; nocase; content:"bit.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/banbif-pe"; http_uri; nocase; content:"bit.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/lmterbank"; http_uri; nocase; content:"bit.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/shpee_coins"; http_uri; nocase; content:"bit.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/tranferenc-rete"; http_uri; nocase; content:"bit.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/transf-retenido"; http_uri; nocase; content:"bit.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/udmcmadcracked"; http_uri; nocase; content:"bit.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/verifikasipemblokiran_id"; http_uri; nocase; content:"bit.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3g1epw3"; http_uri; nocase; content:"bitly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3jrtmmu"; http_uri; nocase; content:"bitly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a/blocked?hash=3wk62fc&amp\;url=https%3a%2f%2fsafetrac.co.ke%2fcgi%2fhome"; http_uri; nocase; content:"bitly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?redirect=utqb"; http_uri; nocase; content:"bitly.ws"; content:"Host"; http_header; classtype:attempted-recon; sid:200058028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ufbr"; http_uri; nocase; content:"bitly.ws"; content:"Host"; http_header; classtype:attempted-recon; sid:200058029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/utqb"; http_uri; nocase; content:"bitly.ws"; content:"Host"; http_header; classtype:attempted-recon; sid:200058030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/v4j5"; http_uri; nocase; content:"bitly.ws"; content:"Host"; http_header; classtype:attempted-recon; sid:200058031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/v9dn"; http_uri; nocase; content:"bitly.ws"; content:"Host"; http_header; classtype:attempted-recon; sid:200058032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/vkfd"; http_uri; nocase; content:"bitly.ws"; content:"Host"; http_header; classtype:attempted-recon; sid:200058033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/en/balances"; http_uri; nocase; content:"bnbchain.world"; content:"Host"; http_header; classtype:attempted-recon; sid:200058034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/en/trade/now-e68_bnb"; http_uri; nocase; content:"bnbchain.world"; content:"Host"; http_header; classtype:attempted-recon; sid:200058035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?aplicar"; http_uri; nocase; content:"bonomequedoencasa.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/h-user-loginorregister.html"; http_uri; nocase; content:"brooksonlinediscount.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/maak/public/services/a/webmail.html?/webmail/nuro/login.xhtml"; http_uri; nocase; content:"bruxiesegypt.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/:w:/g/personal/dkapaon_brandeis_edu/es1enxze9_xblrutnfjfpm8bbxkssfvrpe6cnirweqaapg?e=4%3afdar13&amp\;at=9"; http_uri; nocase; content:"c569257608da4dcaafbc-my.sharepoint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/s--zx2ndwztamumt0fvpaakxw--/accessmail"; http_uri; nocase; content:"cakeresume.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f/9245db2516febd1d3c13c0a90f65c615"; http_uri; nocase; content:"cbn.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200058041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f/fa15a875fac963541c5da50d05c179ac"; http_uri; nocase; content:"cbn.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200058042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/setup/existing/"; http_uri; nocase; content:"celowalet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c?n=9367162000056199"; http_uri; nocase; content:"cexpr.es"; content:"Host"; http_header; classtype:attempted-recon; sid:200058044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?m=0"; http_uri; nocase; content:"ch-299199919900.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/47bf4459e08bdd99ca37504ad096cf7a/seleccione_medio_de_pago.php"; http_uri; nocase; content:"ch-swisspost.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/metamask/"; http_uri; nocase; content:"chainnlist.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?m=0"; http_uri; nocase; content:"chase-help-support-locked.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?m=0"; http_uri; nocase; content:"chase-onlinehelp.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/link.html"; http_uri; nocase; content:"chefset.com.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200058050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dkxepzr/bt/btcrackas/login.php?ssl=true&session=h0xfy7u4ofbl3klsmsbu0iuptwzcpayc6st15ckigek2lvp7b3nj87liwvlywew1cnmjwaob9eeq5tl1kvrbvn6owyg6dhaz3ilttklbpgf2rmerxg5dh9qqw0zwozrpxv"; http_uri; nocase; content:"chet.com.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200058051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2021/02/blog-post_12.html"; http_uri; nocase; content:"chronopostvalidation.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/proxy/rdh-rjsrv9zzrx57iscgov74o1gka4qjdfj01qr7v8-pkjgyvn50tivt7pzqgm5kuqdmonqle3f8eq_t8f4xl6jdozabmf2lxy-888ai8hdji633rg"; http_uri; nocase; content:"ci3.googleusercontent.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/proxy/djc3ckf7jcnj8l0duyaqyjwffeskzbccy9spjiauj_jwrplgw0ahyaf1xozvm6n_fjn8q1-2vkhqqujjr1en3qej703lyxxujt6tto-ttwsl6hgsggp3ehcc"; http_uri; nocase; content:"ci4.googleusercontent.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/proxy/zjba9cvtmkfnoveyofx6gqong0kqi3s69d9o2y32fmu_gankb59tj-rb79bolx0bwbsemnonfhh2esy9olfdp-20gybztkzstfhfheqrrjuefxwiwkqws29wxm6tdobikwz-qkzfphpaldfr"; http_uri; nocase; content:"ci4.googleusercontent.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/citizenbank/login.php"; http_uri; nocase; content:"citizens-online-support.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/escl6%09%09%09%09%09%20%20"; http_uri; nocase; content:"clck.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200058057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/gwg8w"; http_uri; nocase; content:"clck.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200058058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/yzuft&post=665308711_32&cc_key"; http_uri; nocase; content:"clck.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200058059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d0uo8o7z9ki0h4wqgkdbm/p8heh9h9q40gootq/ahr0chm6ly9tyxaucmvpzmvulxzpbgxldhquzguvyzzjmdk1zn8lo5s4gp3c9cjrdeooqwy2imkod5fjjysnbc8xvpcpzcqsaytrugqb7oode9hhi15s7tdkjvi8ab8x"; http_uri; nocase; content:"click.convertkit-mail2.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?qs=6541641088c869552ced792d84ee93eabf075e23cd5eba83a7d07a40ad9cf2ce36c931984719b9df7de658999defbc87f999ec46970a0280"; http_uri; nocase; content:"click.message.fruit.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2sm/www.facebook.com%2fidmeinc%2f/nk2-ri4n/weg/x37pnvbmkp/axzhlmv4cglyyxrpb24unjbfzgf5cw"; http_uri; nocase; content:"click.pstmrk.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200058062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-includes/text/tab/dab/conect/"; http_uri; nocase; content:"clickforcontent.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-includes/text/tab/dab/conect/1c7c5"; http_uri; nocase; content:"clickforcontent.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-includes/text/tab/dab/conect/b8f9c"; http_uri; nocase; content:"clickforcontent.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fact-comp-h5j6k7j"; http_uri; nocase; content:"clickmetertracking.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/pros.htm"; http_uri; nocase; content:"cliniquemultisantenicolet.infosignuat.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafkreidqr7tw7chuyg7pf3obkufp2hultdpoas37vnnofqes7nzkq3kqfe"; http_uri; nocase; content:"cloudflare-ipfs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/agt12/outlook"; http_uri; nocase; content:"cognitoforms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/automotive4/hrcompliancesection"; http_uri; nocase; content:"cognitoforms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bitflyer2/bitflyersupportcentre"; http_uri; nocase; content:"cognitoforms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/knpdf/ussecuredpdfdownloader"; http_uri; nocase; content:"cognitoforms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/en/"; http_uri; nocase; content:"coinmarketcal.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/#/"; http_uri; nocase; content:"comusoportecam-produccion.appspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/h/y/b6733bec265eb698"; http_uri; nocase; content:"confirmsubscription.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/rainloop/v/1.14.0/static/js/min/tmp//"; http_uri; nocase; content:"correo.medifort.com.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200058076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/s/0cwcrbvtwc1fvt"; http_uri; nocase; content:"craft.do"; content:"Host"; http_header; classtype:attempted-recon; sid:200058077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/s/z8eavvjmh29aht"; http_uri; nocase; content:"craft.do"; content:"Host"; http_header; classtype:attempted-recon; sid:200058078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-admin/network/acct/login.php"; http_uri; nocase; content:"creativecombat.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-admin/network/acct/login.php?.rand=13inboxlight.aspx?n=1774256418"; http_uri; nocase; content:"creativecombat.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-admin/network/acct/login.php?.rand=13inboxlight.aspx?n=1774256418&amp\;email=jackdavis@eureliosollutions.com&amp\;fid=1&amp\;fid=4&amp\;rand=13inboxlightaspxn.1774256418"; http_uri; nocase; content:"creativecombat.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418"; http_uri; nocase; content:"creativecombat.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418&amp\;"; http_uri; nocase; content:"creativecombat.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418&amp\;amp"; http_uri; nocase; content:"creativecombat.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418&amp\;ampopensource:observable-35835700-0d08-4c25-a188-b8312ba00a941067515"; http_uri; nocase; content:"creativecombat.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418&amp\;fid.4.1252899642&amp\;fid=1&amp\;fav.1&amp\;rand.13inboxlight.aspxn.1774256418&amp\;fid.1252899642&amp\;fid.1&amp\;fav.1&amp\;email=&amp\;.rand=13inboxlight.aspx?n=1774256418&amp\;fid=4"; http_uri; nocase; content:"creativecombat.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418&amp\;fid.4.1252899642&amp\;fid=4&amp\;fav.1&amp\;rand.13inboxlight.aspxn.1774256418&amp\;fid.1252899642&amp\;fid.1&amp\;email=jsmith@imaphost.com&amp\;.rand=13inboxlight.aspx?n=1774256418"; http_uri; nocase; content:"creativecombat.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-includes/images/verify/update/y.html"; http_uri; nocase; content:"creativeingredient.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2011/02/habbo-crediti-gratis-sicuro-100.html"; http_uri; nocase; content:"creditiperhabbogratissicuro100.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?id=110"; http_uri; nocase; content:"creditytimes.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmy3c4gmrv9ydxnqq9owfrasml5u6rhqktjzataajlobva?filename=cpaneltrueloginloginiuoi.html"; http_uri; nocase; content:"crustwebsites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200058091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/services-clients.ids.gov/start.html"; http_uri; nocase; content:"cureinsomnia.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/:o:/p/clord/eo0lfhtannnjiehfwx2q5o8b_lkpqdhacft8rkvqad2nqg?e=5%3aq65oiu&amp\;at=9"; http_uri; nocase; content:"curtislibrary-my.sharepoint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?m=0"; http_uri; nocase; content:"cusstomerservicee.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cb6xkxc"; http_uri; nocase; content:"cutt.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cmvdf77"; http_uri; nocase; content:"cutt.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/controlladispositivo"; http_uri; nocase; content:"cutt.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/controlloportaleblocco"; http_uri; nocase; content:"cutt.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fmozvcb"; http_uri; nocase; content:"cutt.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/hmartcn"; http_uri; nocase; content:"cutt.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/in8epae"; http_uri; nocase; content:"cutt.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/omyuz0g"; http_uri; nocase; content:"cutt.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/restrizioneportalebper"; http_uri; nocase; content:"cutt.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/s1tazgg/"; http_uri; nocase; content:"cutt.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ymgnwrt"; http_uri; nocase; content:"cutt.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200058105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ebvdr"; http_uri; nocase; content:"cutt.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200058106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/u6c6z"; http_uri; nocase; content:"cutt.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200058107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/nrmxx/index.html?u=abuse@optusnet.com.au"; http_uri; nocase; content:"cvxxceode.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200058108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?utm_source=clizas&utm_medium=facebook_desktop_feed&utm_campaign=pensblack&utm_content=5257&pxl=1251571498750191&pid=clizas&wioekjdf=232432"; http_uri; nocase; content:"designeest.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/online/showdocument?documentid=1fce937a-ba39-4053-a83a-f07711ad8efd&invitationid=82f3e840-cd11-4da4-8579-304bd7e930b0"; http_uri; nocase; content:"digisigner.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7p8ma?confirmation"; http_uri; nocase; content:"dik.si"; content:"Host"; http_header; classtype:attempted-recon; sid:200058111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dirbn"; http_uri; nocase; content:"dik.si"; content:"Host"; http_header; classtype:attempted-recon; sid:200058112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/iavat"; http_uri; nocase; content:"dik.si"; content:"Host"; http_header; classtype:attempted-recon; sid:200058113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ot6v7?confirmation"; http_uri; nocase; content:"dik.si"; content:"Host"; http_header; classtype:attempted-recon; sid:200058114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/tpjda?confirmation"; http_uri; nocase; content:"dik.si"; content:"Host"; http_header; classtype:attempted-recon; sid:200058115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/w9smu"; http_uri; nocase; content:"dik.si"; content:"Host"; http_header; classtype:attempted-recon; sid:200058116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wf9gl6"; http_uri; nocase; content:"dik.si"; content:"Host"; http_header; classtype:attempted-recon; sid:200058117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/23/index1.php"; http_uri; nocase; content:"dispatching-center-uspost.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?url=https%3a%2f%2fpushrushed88.duckdns.org%2fredirect%2f&key=ulc_4epigzz16uwfb5b_yg"; http_uri; nocase; content:"disq.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200058119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/sz8qtw"; http_uri; nocase; content:"dlvr.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200058120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/document/d/e/2pacx-1vt_xl-m0ff8yqqhzhgseahgwejo0znh9re6w0qvgbe0qfe084hrebjjg673htphdnvbcdnq6agehncq/pub?mobilelogin"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/document/d/e/2pacx-1vth3iya0ov7p49rk9ejozgqnueuk8fna2mky389hertlwx4mnoyhl1mlhnwbz8sxnsqtk8i5uysmq68/pub?embedded=true"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/drawings/d/102rf2dvcjettjv_xsojr3u4nlaw-yuqx_mqawfdou_u/preview"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/drawings/d/1vqgce2ej9a38akeyahewckw9prkcmgd3p8fbcgkg9jk/preview"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/18tk5qmpccb5nygfkfeo9xc5qowvffgdjvy52swoyhd8/viewform?edit_requested=true"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/1aegowsjpbld0rvgivurbyfidcqlg5v7z9i9ylo3bey4"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/1aegowsjpbld0rvgivurbyfidcqlg5v7z9i9ylo3bey4/viewform?edit_requested=true"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/1casphevkfdaz2okqj70wdai3pdwwg1weh_rpk9v0z3a/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/1dhev7-0nkaxhj9iyrjjs-i4ay6i9hseuwq-hiwdgdea/viewform?edit_requested=true"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/1g1hatisjxswx8aoimoehyj2gumqe6oqb8wczylqpiou/viewform?usp=forms_home&amp\;ths=true&edit_requested=true"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/1htjqwgpnkonvm8dbgasjax8mkpu_pvnj0c71ttkfpn4/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/1quv0zklyhgw_4y4pfincdtzmt6qim5qffhfuxcb4kl4/viewform?edit_requested=true"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/1zrjdske4sj2quapcfx-m1zhxfnnuoi-6gu7ekfxwt1q/viewform?edit_requested=true"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsc-dgjx5xrdu-0vsevx2bd16zlt6rydibvfdsgrqlxld4lozw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsc-nv7qlz6jg_y9ze5k9ds_kzo8hyelurb5j5veve1q4jkiwq/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsc-xysogohjsbzmcnoded8ooar2gz1c5zxobgk8envh3jbpow/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsc0o4vlkf8kr3nf2m594obfauspo2orpvqmat7dmhk272ex3q/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsc0yyqlieizg0nzouznvhsjfags1h9qi5hpdw3qlgbivm501q/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsc1sinntdpgo5c6tz6crpbkhdb59q9y8mjtcwfr5v93buo9wa/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsc3se_efrnsx26okglvyxsebmgjxvijczf6rah-bha6-ozcta/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsc4bagzjzmstbnjhy7zpy5zsx-xrn7reoouolv54luk5tihha/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsc7bhcjqf_dndnnp2rbynzblsgi-94caoxwqkpzwv5sfbqavw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsc8ivrcjrbnxs_ckmgkrmk1unmuijsqwkbudbmayumt3e438g/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsc8uc5aztlek3s6dqtk1etorhez5m2yvubyw5qmfkpisrelcq/viewform?usp=pp_url"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsc9iga1axtvpb3xfqrjlhn19tseealmnrpsx6eecz7qdattig/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsc_enqwhhv1jnvzy55mb4ghvjd4wcz9plnolh2eoitk7qgbra/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsc_f0pxmnwzrtbck6u06fdzocmhgzvjzlc8cu7c9b456fhccq/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscaoiohhbm7suyz9ol9o9ueunbxn6donxrfjge2cevdw_8jmw/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscb7kyuyupqxmed0oud--iuceivbtdefhtegm-ostgwhur9gq/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscbgg1lrsb7p3ojz5zcsuhmlr4oya-ryxnkw55ae86ax56ojw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscbpunbcb6ubfnwjo9jol26cjvjjsvpzkz_wb9exxt9c7erdq/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscbtba5srjedev4uvqq49pt3recywqah-ar5szplndj-dxhgw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscc98m5fw4ifog0zeiuquxitizmisrgsdvyxvtxsppunpkwzq/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscckv1-rxhipcmrhnwfvq2lhuxx18nzcm1e7e0oz8ienixtgw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscd58n38gw0garqqds4nsmnwpsftsk33a_nkix4enivry-v_a/viewform?usp=sf_link"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscd8t8sjgxqrsa6dq5kjpmrpsxkvi4bl38sfdu7wa3sl32elg/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscda1to5ru4sjeeujg3ki2bimklprvsec6u43kpvhbfyhrldw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscda1to5ru4sjeeujg3ki2bimklprvsec6u43kpvhbfyhrldw/viewform?usp=sf_link"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscdct8mue2qq3syjr4tnntol30jfdk8vwpco6yjh7dxnq5nyg/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscdct8mue2qq3syjr4tnntol30jfdk8vwpco6yjh7dxnq5nyg/viewform?usp=sf_link"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsceoxsfawdsbd2r-jk2sppywnv1bchzjjcw2xkcj7oqkwqriw/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscf9u8nrld-zvu6clr4jcwnw0buqrykdldtzoullbxy8kc1ta/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscfh2njwrve6_rkxxy1yz83keoeekd4maqcnd-ivq7rkg0uca/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscirilop6_iti0zvvrlsbk8zfaeo-f10otlhj9k5liyervk4g/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscjsewetq_v_cbpyh9dzjwsaoldxz2zx816022wp1vej8gv1g/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscjtat4fmstlxz3hbfkg4qyi-epfdmun7_avcqwvgscoydytw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscjvnhykksssaw-kycyrl6ywg_r3fdjuyqhk2mrmxcpgwfxoa/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscmzyecgbuuccfs_5e5axn9hpruzskqmvseedm0xz1qrqb5vg/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscn6xxq_xvtivggy_4rkibou1i27e0kpiimikafpaavki1vsq/viewform?usp=send_form&usp=embed_facebook"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscndiqyfu0gtgwomcwsy-8nadvzgljrpdhkv6pedgh0avniag/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscpx74rb7zxhoy5s3cpnwznbr0a5l-zomnobz3zj4sovxwbbw/viewform?usp=sf_link"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscqbbsvkpxnasqgeazpzwxp1ln7qzdurt-nqn4azqa7q14euw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscqstjp2am_gdxb3vmgu9lkv6l7jho80rmyd7lmujoarxrqjg/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscrmsgjymaojts0bfneswvnfekiw6zya5rzyqoa1ydp5wkcrw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsctmueyv-hoo8lvwjhptfnaht4ymn8cr3tnftbfnqmjb6xpwg/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsculwcbe3tgibs71_tvuiplfkyqieekspo3iozmnjbhsn6kfg/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsculwcbe3tgibs71_tvuiplfkyqieekspo3iozmnjbhsn6kfg/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscuttypbph1iazuis8aa6xvrlmagwglmdcrrg8g2oymskvbva/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscvqmhqgwbubzxdynzgvlbmmziyagdiadz2eyhc-s-ro8ndfq/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscxgbsqs0_gphf4vziykyu_g5rgytw2s9fir3lyfar7kaixew/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscxgbsqs0_gphf4vziykyu_g5rgytw2s9fir3lyfar7kaixew/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscy0frglrf-omcz0vkzncs5vnnwg-sbnzhqxv7fhse6pfwf7w/viewform?usp=sf_link"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscywhsspi2neolntfe02hpq6jqilhxprhi_z58uj2lfqortyq/viewform?usp=sf_link"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlscz4uf8dtvwhgxggkzsbbhjcgu9npgc6agxpy5o2fwpo6tv5q/viewform?usp=sf_link"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsczswa80hlvnpkqiuayjwbf8ha_rqzov0iiz18iixjatmqk9g/viewform?usp=pp_url"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsd-1s4o-n_p_bhfqqs2agxxx4erjuvj6e5pwndokq5tg5cnzq/viewform?usp=sf_link"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsd-bdmru2lv7bv1fk1mwwkxyrvf6uyx11zlly9k0j2gdse_rw/viewform?usp=pp_url"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsd1oa3lt2ezuxt9mjskiazk4g0xpw_krpkiy4mot2_pu1b4gg/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsd26pifmynauv34el3gdnx3yzwdue9bannzsfcy7bdkyfotaq/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsd2nideystvwbbe_ai_glo93rwmxwkf_ok7sl_dvxqtacpwla/viewform?pli=1"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsd2ou8uvxtpuhvfme1q0hzpsnfnwg-nfno2_niqp6fzcjobog/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsd3x6brnru3toiionptordwmc4zorxcky1ebpmeg6bb4jfuca/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsd493if3zxczsfqzw_g592pog6wbhptgrci8sbhji11gq312a/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsd7jgegqudsjg7blscqgfvdftyvlno6xreg6wjuxl0hnfbwtw/viewform?vc=0&amp\;c=0&amp\;w=1&amp\;flr=0&amp\;gxids=7628"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsd8vkw5fxeroe_pxa7n5cdfpukhahbg_7k7sg0iuosh_xsyoa/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsd9poeb_wmgffgg8taw4z_np0kdbo32gr35k1zxizj7lcdela/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsd_c4wpt0zzouwt5lr9p5kn5cylz3ananv1hlix6u_h36w1rg/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsda4flfi-1_gvwqnbb1dcxz_mb5omo9t2oc-vslzfgh6avrag/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdbgprbyowwcugqslasnoo-sbqcrgi6ppycsytvsw2_dwfeug/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdbkfmfqztp7jgovpccnw7tpdvoira3xj_n8wxlznck2qchxw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdce9c1bqexlzlu9rojtuwtaatyeeshywbkmuiobrw_a-_mga/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdce9c1bqexlzlu9rojtuwtaatyeeshywbkmuiobrw_a-_mga/viewform?usp=pp_url"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdcga7ojllxp3z9puyfumhvn7klcijhty86bmhawtv5r6wwqg/viewform?usp=pp_url"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdcznggxnwia2ct8kmxid1tdqhgerhnmixukxuj7nmq1lqsma/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdf04avkjwvete8rj-wa3i7u6_8-orwqu-c-owvgb0nrxumga/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdfarxg-0eurkyimsg-ukgl4mbtgvwfhe1wzbdxmb7oaosnyg/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdfyxb1kjjvkaiwbbpbgr0dfaq1xx2ehhzbxnt3adndssy1yw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdfyxb1kjjvkaiwbbpbgr0dfaq1xx2ehhzbxnt3adndssy1yw/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdinjm_qvdbv3roybqi073rm1pujmrrs7lid7c3qk-4xwweew/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdjmguhf2gu58xprr02lay_fc7kwixkq5zmtsn-5rgblqhbiw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdjmguhf2gu58xprr02lay_fc7kwixkq5zmtsn-5rgblqhbiw/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdmjjljjfmjeijeyraxfm6pzupdbvoie7d_ussaqgqu2jh7zq/viewform?usp=pp_url"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdmq4frgs3m4_ntgmowso8b3bv5cowvplw2k4jkiap9qbjxyw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdnega_6c_pz9_q9ep9epm4iwqfsrxqsnaz-j9dyldimaoocg/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdplfokrnpmrpcrkjrxtvb7hv0nyzfocaudzkgzrftfbumaiw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdplfokrnpmrpcrkjrxtvb7hv0nyzfocaudzkgzrftfbumaiw/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdqfve1h8rnbxnyd1zsnmzubwmvnzqza-o0yfbtev8e2jpevg/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdqupro5hny5wbr5o5logbzdfh19mlw8vggtnzxrouoyvzkog/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdrk4xndjat7qhzawgsc96chkgkg66dcwrujwfkgjhzkmzhqg/viewform?usp=pp_url"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdryyw_8jxyshcn2amwtvlejxhpilt_rgtrnf__2usbchmrya/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdv18eomou5hfrisolwgi5-sodwyxzdbw-x0cndwjqmorem9q/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdv5owjshz-50lp-lmzff4i2z0r9sg31mh9_7b51rt-2ixoew/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdvwkczn_rxvn1522z1mcojbs40ymrctyizpyuv72_0wbypgq/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdw6y7nnvwnh2fqlqyk3y7x1ppoy2j8v9tlcacpmq_mqasyna/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdwbz5hapgqojwjyndeeyjxamg0wnaj3kolh3fb6xf4c-fxjw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdwbz5hapgqojwjyndeeyjxamg0wnaj3kolh3fb6xf4c-fxjw/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdxkjfhjk2jl99royttlqooscpgo3r9kauddp0idc_ih1g4ug/viewform?usp=pp_url"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdxm-rwnv41p3wdcbtetukrctoakvuoe1h_uy8jgnxy7kldza/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdxupqc45v5krv3e0skzu03cm214ktma588b8afg1stpesclw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdxupqc45v5krv3e0skzu03cm214ktma588b8afg1stpesclw/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdy1071rbhheyidjzo6fw5busqot5eunllw_thawo6udamfaq/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdybqflfptobqslhflytic3g936bnojaljztk6ct1d5mjvnnw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdzm9zmwu3uec-1daehib24dewlqhhjqrj6ticyz5qlovz29q/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsdzrubbm3nrqdzjs6q7phutjgmn-dm8zquphjg9ge31q7bdhg/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlse0wzdylvek6cpem3mb8zeny09jij27yj-b1p6yytyue-1rwg/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlse3-zgmg83lctfks0egmambwonybkscrvxix--n1azwngkphg/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlse3ukgwguotprcg8cfwp4kxwz64r5ogqq1j_m4ohjpop5f7mg/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlse3va6zonlim5niyl74b8jis-o0fwno4qethj1q7rm2r5xdba/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlse5htthgifmniezokiypnjjhanvkvlehsrk9esgcpoauqutiw/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlse8ds15kxxdcrhfspcfrbvy6sbdhp0e4540zzmhhvzouewvka/viewform?vc=0&c=0&w=1&flr=0&usp=mail_form_link"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlse9rt6zh5elfgv22gctlqirquhumjlghsjgdcjk7rqwqwdjtq/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlse_mo9pzgdahzdgz0wctr7lm0cqm_zwos8ljc4cqgtvnqfmfq/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlse_pppzkv1rppkqwcnttkpvx35meb94rruunhijhuua5svvcw/viewform?usp=sf_link"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlseaopmohwe4llodr6rvz9ybhvfg0zoqnsxzvzuqwblxhy17ta/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlseap64bhtbncjqllykpujyr2fa_s9yyfiylqbdnutvdu0kntw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsebpakzyvtprhygwe23jlsdieyoca0jtiyy-f68nqwofparww/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsebyedalhc7exqq5fljf8x1akbwz0h8l8ojbx5nx3go7bh3sa/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsebyedalhc7exqq5fljf8x1akbwz0h8l8ojbx5nx3go7bh3sa/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsecilc_5ka58gxqjfrpwbfwmhykkdly-lwm9yubx1l1gwzgpg/viewform?usp=sf_link"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlseck8-g3um70ihw-ajfait5whcec3qdowobizswz8_-et_jkq/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsedam8qavfd7nwszgyriuofus5xlgrvwcojm_8jtzpiw9ud_q/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsedo_qltt9u_t3npcsotct-qpznpfufcvsursimiss9irgnza/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlseenhbbxtwamfmork3asua_pfejkhmxkqv8hlzwo-uznm3t1w/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlseenhbbxtwamfmork3asua_pfejkhmxkqv8hlzwo-uznm3t1w/viewform?usp=pp_url"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsefkdadsbapfd3db9toxntif0evefzkwazu5xituuthp9mbxw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlseghb19gxs04xdkab1cubu6qmclhh_rpb2fwa8nwutpbwnkba/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsegnx2irh_r_gtlspwo66pv4vkht2oobqmvjtvs4yqjj6vr7q/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlseh8l6dbswsdhbte62h7cjnmea1voup-3y7qhvdepcv2euzma/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlseht4cdltkad8967jjarcb5nafonbaw3dtpynth9mdk94hf-q/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsehwehncrhloyw72aebvvzvvzjrs6yz6qphpm1dvobyr8rnig/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlseirld9oyigwxmec2bc-ax4yd-m-rhezlne00aminsjf0uteq/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsejavlqdkikylynqlg6p7kyfu4qnlyy31opnfttucuhgmek4a/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsejzzt0w_l58kpcmcq1bseqi53i0retcnl0a1-uldxvnyz-ka/viewform?usp=pp_url"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsel8uq3oplbpuz97bjyv7s-6wdghzjiaiauioimsb9buzjfuw/viewform?usp=pp_url"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsemwyrvcln1ql8uxd0dsiswveuehikz5hwalfeni7jjfaefmg/viewform?usp=sf_link"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsendcad0-oklbqxfu00wcpmqroltauslhiu-yvqkjywefuqaq/viewform?usp=pp_ur"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsendcad0-oklbqxfu00wcpmqroltauslhiu-yvqkjywefuqaq/viewform?usp=pp_url"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlseoz9zpmm0c0fjksklv-p1hsrwsuybmj6bvbd_fkewzzcv_ea/viewform?usp=pp_url"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsepe4jevfm3mjc-vndxuq_9wjpc7afrjadkxvp8czawh27cqg/viewform?usp=sf_link"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlseq5h3-5stw3bwnpoi6g-gfwcgej7q82incdm01dd1lf182iq/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlseqdx2wgybdxlhascsuopq1xqsmwrxjf4erl_cpmvtt96dq_g/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlseqgdmahlsb5qoaum6xdl1jhhzggtb7wiabsy3bxbmdwriwrw/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlseqvqnxg0qnfc_qjompqm_bjbey-oivzpldd-sybsidx1syna/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlser-b6q--nvif2fj7nbn88dh8lj-s2yfbgjyuygwsacbhm6lw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlserwgqm-czpabole0qw-jg4bhicctqdjm3ex3v4vzifj5wldw/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsesbvdbzo4nyhhdgovwhf1s-dcjqxxsb6p8946jiznaxsgdfw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlseszgantjzuxgteg0dsiizzmadcwjbjqcsri5nidod2rd2_lg/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlset42bzecl3yrdnnffv6f7kecxpd1sy4rbh3h3govwg1k1z1w/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlseumxp-wga1x873upqxmi_hx8nbbllh12zzmxia1xuqp2mgbq/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsevpkt1byhl-oqjptw8wbecnm7-iqnax-mz8zd-mxp0fol3jg/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsewr7-ksdpydhc1tv8tkcxrlad8zrf3q_uqt-rj9a_fmmzxya/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsewr7-ksdpydhc1tv8tkcxrlad8zrf3q_uqt-rj9a_fmmzxya/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsezbbqgms0nnvgk6aq0xz8sa19zyd8w87c8js99mpi3go1mqg/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsezxizhvg-i28_n8fyddanndnufw9veep4kk934yekxvxdmdw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsf-exsf9vm0rleksdp46wa2dfca3dhphayf4tl4rktjvmgguw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsf0-sqpytlsyi6uz7javookkcvby-sd4j8bc58zujl773d8qq/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsf0appdcwb17-g15hxqlvwdz2cngcp90uuisclz55s2volujg/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsf32hx6ujsi_gqji38udpamxxxnhyrx8qhmqcqnteinj_0cmg/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsf3wmsem7zluqpxpuwmk9qxvc5uvpl1qkhc3grlydk1ulezua/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsf5kddqqm_3wtjvz4uwjys7h85m3yzgjhxnt5u8bjc_eqow7a/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsf7rktag6kzmtxateu6hu9atx0meohtzokrqkuvn62ojflqba/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsf8avlv66xxtfrjrqp5mdyrgjpnuy0im7uv-5fi5-8vebnvaa/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfacaqo8c7hsu7mr6zkbsfulv8m710ke2qna_7tyusomgmtjw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfacaqo8c7hsu7mr6zkbsfulv8m710ke2qna_7tyusomgmtjw/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfaekglhjlubx-j0s40wtk-dntowamok2u3dl24wdxhni6cuw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfdy4lqz9cxxc2z-9qldm8asxoikrw5w_jb9d0iciiyy_bpbq/viewform?usp=pp_url"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfe2ymhbjhlp2njbhcnyypkh2q_svr-hjv6jakyhkrcvnrfhw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfeoy_w3jwkkz8psgsw4nrja9tmg2lx0x0nvtmv38k0hjzzmq/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfesajj9-epeg0p0pdzfaf3xooefbwmwsn2jne-6doh86mocg/viewform?usp=pp_url"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfetregzccisehncfk6344jq5ab3iq6ft0a6k_v156sh5j24g/viewform?usp=pp_url"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfgejlprqaiajfduzoh8gejctdxdv-kyn38ztkb3fu6poxwzw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfgvr248yh1nbpu7vxfge6ez6e6vr66ia2m649og4_a87g6vw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfhrcintrbwx2of6w4vp1xd4fldir-qeghinej4jhsw4qzhjg/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfjchag9rs_yczr5hheyuc70ukrtaonxwdhxso7_qhcpp04lq/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfjpx-sxpejnp_q2fmfu0jy8oqoesrx9wbrqplcychw9luupa/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfjsgjhbjke-mlmni8cfg1tacz-hdpvmy5j2br9upjr1f7nda/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfjsgjhbjke-mlmni8cfg1tacz-hdpvmy5j2br9upjr1f7nda/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfk9hpkld9-qwaxs8b0cpslaw2-oomu6bcwpxkmp-fo8kr3ew/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfkl2vgsks6ni0mb3-noocjqf7auguvh9lavsnwjjy2c0mgzg/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfksirdejkit-tdeiwrnkf00ygsqdsqth0hmwydiqdik10tna/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfmppmwkaythtoskrsm7wewzrcamfxbeyuc6f1ewjjmzisfwq/viewform?usp=pp_url"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfnjyzbmw-pd1byw4b4opoksx2cealounsnhg5fjc3fk1qocq/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfnlsbejsiacubkj2geltmn7slefoweeczuagp3jfmfkijg4a/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfp1eukgsktriyraz2csynqwfwtv6ehlnbszu69dbxz9lirtq/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfp1eukgsktriyraz2csynqwfwtv6ehlnbszu69dbxz9lirtq/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfqf7_zc-bsb7ej4d_rikrhb3bi-o15o1l1lsa-dw0nr-pztg/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfqjyamn38kyfu1gixlitpfnnivmi4dcrwllbchwywxcnmcba/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfrhtzc1pcighculgyjg6juret215diaac89flqhhwg0wx9aw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfrw9nsla2lpenbntfmz3q_bu-6vayjudjntqikzcei2rl3ya/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfrzt6zpkhgtvzqutkypqtjffxaucn3evqpf6ytbqug3t41yw/viewform?usp=pp_urlorganization"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfsia_g4fb5yg_cu8fjuxcndbgqz1setzfedm0cw0eaonb57g/viewform?usp=sf_link"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsft-g7e8ag00mkvklgzqeigcx0niinpyyehsbmw7fgdndqr3a/viewform?usp=send_form"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsftriyys-rvphnbmh6v6lyimxjy3rpog8xvtb3v1agqhawiva/viewform?usp=sf_link"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfwdsuczwrih_wnciwh_qjpg1v5p-qk8zyjjoccpbhmyeygrq/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfyg4g3xanl17-4i833ep0joctptyxfsylqd3m2wujpwu1uiw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/d/e/1faipqlsfzhyjvw1nn6bvqhbwmd3rcrm6gukuzir5u9tmsszmcrr8nyw/viewform"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vq-kgeftvc1kxvtolumxxglkee9xtizvx1eplw1kofdphi7vg6aewmcvi0vmnbjl7posgpca66j_uls/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vq4hyx6e6mf1nkcfahszocd4euljcttnbpuabhtutx0j06advjmp1dw_lfomfcj1hfzydsuas3q5gtz/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vq5dr7ajdkfwicg5n2lbhbfo85bwvgageeqmuvllkwg5i2iuhekmsvmwotev1nnzoy8xasnxerngqew/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vq7oplr_-m2wcmmli5bewiwc-vkkblykry1ejy1vfvkm6c-yanjplkligavkr2dt8vkw6dmpyzkp_ki/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vqceunmlqb6apzo7atraqyngn3_ydmlpxjto5ebpmdgnovp86cd8pid3_1qn-mzdth1_yvtz-rw8u6r/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vqcxaksvh9qxnwgnjtxegtb87uioajltkb9cz3twchjwhzlg6zburl4bsylseawn_fstxvghhfvcbsg/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vqdpnj-uxhtwzjdl7cw4swdmerzqmwm0r432xajgh7m68p6zman4lik-qque6xgsgg0gbrupjj8cmqy/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vqe7ct_tlzmx1xodxvcufxug9fsopjfezze2e4j4-qapyezs1kjzuhy1d_pjjoy3mhwaxe3kcdr6p1l/pub?start=false&loop=false&delayms=3000&slide=id.p"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vqfy0klc7lmimfug7xrvape2jdz8153ptionyg7ht7va1ggm5loptsqunpgtiwn36i9y8ggrat6f7ka/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vqljiqoxuypxg7a8r5x7frbq4cqcvnb77n155fzyxweegqibwjyjnpghjky3howsxyb0pe3g2wm_xpm/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vqo0xukh2wuts-r_jah5nfa3jsnxxdkgvfcafnigv47ptitu24xoqtt_fhtwbm1p6wpz5ajydo3ho9-/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vqo0xukh2wuts-r_jah5nfa3jsnxxdkgvfcafnigv47ptitu24xoqtt_fhtwbm1p6wpz5ajydo3ho9-/pub?start=false&loop=false&delayms=3000#slide=id.p"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vqoldre-gb1k1v2t62gfanvnwvhsewymnuyogsp8t5znalvnw31sfkoyskhdln7nyisk8cutee_j0-h/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vqopq9v2asclxkhw1tgkr3v1no0smckg8as4x6t4cyhuszvfjkaosxhp2phofsyb8ag0f-anei4kzqb/pub?start=false&loop=false&delayms=3000&slide=id.p"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vqp1bs7pp2guhiddnanci5t_elobevup6mr14v_llaxfa_35lnj_gd57iuzq91rm4xioxgt3rstsqqu/pub?start=false&loop=false&delayms=3000&slide=id.p"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vqplkyp9a4e32svteg9f-hphdfijwtqyrs4dqkj2qumt2we3dukuwcdr-m7whjcqairvdspy6a09y8f/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vqpnti3bdqjgbzjwi0ngtojsxmdbwg61nqahtdld4z9exjm4n21xyu9nz-itwfsaitapaptvjpgn5lm/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vqqcbi03ke8ybh6i0nyvaecikxaa6gdgzvgwdaygprivb_-gkvuvkvqb6hqfld9vovgdewxfkt6n1z-/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vqrgmwrhea9_3meu00x5-qxvldt97oks7zys4hyzzdhhm9hcwqwzbqmwkywvlend7hbvz5tu3wgjxua/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vqx_zel_kuemn6sejjmr951m_x6bzzai7iqp25hfj909xoffbtw822kfnfdpl4uarmqcjov-ztc9m0l/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vqy5v1s_cccj4kf22cod04z-gkurshji5c8ug48fx1hvutobh36f_xtjffoture70f6mvbzoybszobl/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vqywoq-kea3q3xkdnwfqqdxg368izvbbqutcjaxpy3t8duksihqmnqm70qvpl0oox5l-ijx6srgpgrz/pub?start=false&loop=false&delayms=3000&slide=id.p"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vr1mdvfskxsvwpevn0kbbzdj03tkd-qianser_mo-xjpu0pllzd34jz_eodizwbjztx0qsbqtch6oyl/pub?start=false&loop=false&delayms=3000&slide=id.p"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vr3hb4d9wwbx-bwi1ofup5wbefqx7s--m2g6glz0llqamg53jzwqerfqlvbgixpnnrevqxfdysmca8b/pub?start=false"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vr3hb4d9wwbx-bwi1ofup5wbefqx7s--m2g6glz0llqamg53jzwqerfqlvbgixpnnrevqxfdysmca8b/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vr3ymtqas8e4kc5i6jodfs49focedtj4yfx8vpzvdhxkuzoxicsj8dwys0wdendfplr_o6imklsfbfv/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vr47cjjl6r4iffpd0yquj85wazh1jdtp6xpiofpjgzwu18olbjgh1cyqtfcolgtpryqmk2irslyi-rp/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vr7xgyys_ermqmbu4zr2acpqkyq-lgb1o6ku3qct_a-nbrp36qqakglxbcruxut0trkpw6ec0wvb50v/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vracfznzpst1oauen14tohbwfgz-n-4c89cnok8s01petup25sgkrszuocknkmvlvilfegqyjqcnqah/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vrgv40o-9hv-h-te58y7dluzlgkiq2lgps9rphybq5nrrnwau-nlsnedjuazhprry10otfrh3_iq1tp/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vrj8aj-g99hrqq6n5l6cn-le1anwhd8bjjzzfbx5fhlnec79ojapdxgmbuouhudie9xyla54y-wz6uk/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vrl1ylbscadiuntrkeq5xe_bz5zwgfjgao5atkkbeidhn_aqqyspym3hagxsqckazae7pwdwtgkfkvg/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vrlpp6zsae7sph3l-9mdyt5imk-pe2yubomnzj6ny70klvopmcpohusaednw927gszywjusie4gjrdj/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vrlpp6zsae7sph3l-9mdyt5imk-pe2yubomnzj6ny70klvopmcpohusaednw927gszywjusie4gjrdj/pub?start=false&loop=false&delayms=3000&slide=id.p"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vrndlzd4qdrc7kjcsjuzzmrrr2jdhcja_8bqfaromkv4gc0xzecwkk64xdd0cqcypwk3_s_2plp8wtv/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vrp2k-b45tcwcadgwzkulyaqrs1f9vfjs3y19o6fs_7p34ymzwuascr7lkuijhc83-o6fmsbbvehcf2/pub"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vrp2k-b45tcwcadgwzkulyaqrs1f9vfjs3y19o6fs_7p34ymzwuascr7lkuijhc83-o6fmsbbvehcf2/pub#slide=id.p"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vrp2k-b45tcwcadgwzkulyaqrs1f9vfjs3y19o6fs_7p34ymzwuascr7lkuijhc83-o6fmsbbvehcf2/pub?start=false&amp\;loop=false&amp\;delayms=3000&amp\;slide=id.p"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vrpahi2ri6ovz6eun9nmdyvxyen0na9v3_qjmcq-kwctc4lqjkedcbeyf4doyfx5urafpn8mu6hcrnj/pub?start=false"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vrpahi2ri6ovz6eun9nmdyvxyen0na9v3_qjmcq-kwctc4lqjkedcbeyf4doyfx5urafpn8mu6hcrnj/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vrrbkktbsjl0p2tdhjzjo2uawkvwbwipzqv2sgbcl7xpkns2l-hixlz_bwi0cstwntvcxq1a5r1lj4x/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vrriatvgvtaoki3lje5es155asdvvgmqqjoosenskwwiutrtwubnfwgosjeuupxd5oda3gx6hbdaslk/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vrv_qr8skf1llw-syahuvggfll1kvabdlhycyoyznbbf7iy2wvyjdxlynzbnimurs-rskipffjtklen/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vrwr80hlkqe3tvppbdpqb9p_kozbrwkemxrmpemiml6uvvsftuzugbniolrdqkxtbsvn2lragqngwex/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vrzkycesdj1pg8u5cxgsgvm98fo_uldly3uxjpzztxltih-v2p_wssdu9v2ygylpir5munnlddhbtce/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vs3movs6jktjtepqvgibjxtqtgiivwyphsmksyz-_vty5ub-oazio-lzxd6vm3qixjq7lctfpijeykj/pub?start=true&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vs4t3osol5-a2tlqhpxcbnoykx-v0xpvbkex3ikocawxpr1jez_fqk0zq8ylq7w8_4du3b3z57qhj9r/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vs9iynmnt1qmlzrx07ug9wjcpumi8oop9omycxzs32_crcuz7usvufh4mzinngrsspgcofr-qq3fxot/pub?start=false&loop=false&delayms=3000&slide=id.p"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vsabt1i-2nueqcqf0rz1qnu2euvbueqpxqhsuyhywlarwhvrgfaiefggcybh85vbxh1gc9taeaf8uif/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vsbl16dsdhcklcjdbty8yzqpawdwd-cwulpmm5zbo0syclex4kg1kjb2uehs6x7q7rmng0lbrrz-s3n/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vsdzenwrlhewmnmpeht7d8fqmthbmpe94cl4_ooeypicpwzh-x9klalbsdl9roxmcsprumk1pfoy8bt/pub?start=false&loop=false&delayms=3000&slide=id.p"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vselfstaxl9c_s1wi2btyckfowjem0hdgmdcgvufi1wwh5t5vs1f_2cqlfsuenrxarzfulvmhnuxqci/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vselfstaxl9c_s1wi2btyckfowjem0hdgmdcgvufi1wwh5t5vs1f_2cqlfsuenrxarzfulvmhnuxqci/pub?start=false&loop=false&delayms=3000&slide=id.p"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vsfs_pk4-zigqm1bnegx_9gawv7ys2cx90o0o77ppfeimlqbtuy7wv14npitdzydmp9gnfrcjiufcyu/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vsgadsdvdphho326hgyz48tzf57zoifn7jn1-gnkwkzmi20ui9xp0o3xcpqo3iosonxzpduthyd7nsp/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vsgw9oh1ixw4dhkvxkwxlwsu7de-mla1kkntrqmjmqiy0zicd42e_8eakt3kiywvfk0vrfexpkcjlmb/pub?start=false&loop=false&delayms=3000&slide=id.p"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vsijg03essgtzaqgwunnkwf1onfv5qhtfvbk2whvpeono0ieg1c_f8dwj8hox9zdrm3vnq07mxlmjjb/pub?start=false"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vsj7pufdztadksfxi8qokeyjyuk2ufllruei6wyyzpstdbgjkmzjnle3eijlwkfl5xmzeo7aqzppdpu/pub?start=false&loop=false&delayms=3000&slide=id.p"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vskgwhr2flv0fouv_mac13jdyp5a-drx8tnnnd4soc852jjodbgozj44z7_9v5_0xlktsc10xy93zgm/pub?start=false&loop=false&delayms=3000&slide=id.p"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vslbtqvkqaijabb4oyr7u1yn1przvdewnlm7wm8j_defqj83b1lmt-4cveghvfbjw2shd8jou7eloch/pub?start=false&loop=false&delayms=3000&slide=id.p"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vslpj7pk4-axbccjqtpblesxanwetmsmefuchs2sloxncmvllwzftu83w_w_uia1mjemn717hwpcfnq/pub?start=false&loop=false&delayms=3000&slide=id.p"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vspnbijel3trkgiucqlxf7ozncbv8afgi8spwy1we3rmyp_degyrb8lt2euqyscu25c3ow_qsaa4qqd/pub?start=false&loop=false&delayms=3000&slide=id.p"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vsrlb5wlmujw62qr1paqhiyiso0jfaxxzzlpaxtg6fgxhbg1o-q8w_fxbx628pud1ljjcxuwyrav0xb/pub?start=false&loop=false&delayms=3000&slide=id.p"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vsrlc9wjgpkksvgpkm5bads0jspilucc7yayycvcuso-jl1jwvc0luhgtkrt3gsjjr4spvhiktibvuh/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vssxayagcehnojap_9vi4vkx2fwqtkzpgwviy2j2efosj2xfmvqmsyv1avj3eclx5wb22joceezc8t0/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vstfqvabl0hbhkiycydogunjhmqqyeh-achsm8zlhzfvqv_d7ez5x4bgpphh-es6xilbwod1niq1hkz/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vstqki4nnnyrhsn5l0tj0ec7y31bzuyy4tndmtidtdxtpbnwjjrb1nj5rjx_04hmctvvf5iu4yxhjx8/pub?start=false&loop=false&delayms=3000&slide=id.p"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vsunwehw_cgjhia0qokxeica28iqmqaigsiupyhlfhbam7bpq5uaamqs01cucvtm8mt1j5xlc7onusv/pub?start=false"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vsunwehw_cgjhia0qokxeica28iqmqaigsiupyhlfhbam7bpq5uaamqs01cucvtm8mt1j5xlc7onusv/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vsw1xt948vrcdrgqb-wjqr6mlh-v4eig2_vkmrnw1siiwc9b54o87gfdpb6u1gigzfellga0qkoiqbd/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vsx8ahrvwaowtfdbywictcemrz6z1wlqenjtp97v184yas9irqjz2-axi0yov-zb9yo2o5rwe4c50hi/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vsyjh3oqjp_mkyqdaub6tdi-r0ern7crtrrkktdqq6uzvearmeidpgrwvued9lf7jirwkvoi8s63qn2/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vszmxwf77cx9jec22hwonfd-l1fnnca3x407pvkw3_aanghjmyvustququfenxznzckxgaszizaop76/pub?start=false&loop=false&delayms=3000&slide=id.p"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vt-7vbdmulwhyj82dd11iyyxpm9i_2aom9fsbfsmt-gingb5ivxojwoqbb9tliubcm2h7fty8icg3ec/pub?start=false"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vt6d0snoymrlx3csyzvz6u5tng3tiosaofu9awfasd1mzacub7ai3ksnin6tgitol7wp1f5rco59axn/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vt8oqvi-cjrigddy9stskemwfvlxo93ed-cy8f-kvglhfgylbw1qhcgd_fg1ojtjlksvb9kcuar6yae/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vtfn1g0fbpzwcykxnkejlzewbtifxfmrpofew-3rynhil0cfzefyqhwba36d6gzwjh2s2zfk1nh1k8t/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vtlsctrmytwlfbm8jahnsimsxwdjdk7ndptazmfi8y9togp2o8uozykkul9qp3xxeyhbco4zoeuiwbg/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vtmzxxursixfbrvbjamekvnbe5ahh_tcqtf5_tvuhpqkbvyb34z15atuxeiwmhl3vo3cqj7apst9yr6/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vtnqm2u8shvhqgtyog36zyxjjwmeiqc2y9yxurmf80c9kijvzeycqsuqexdzvh8rk1b5b1flubend6l/pub?start=false&loop=false&delayms=3000&slide=id.p"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vtrczay3ggwgwoi1ivjmlxreksppg5wshm2lvd0whsepydeirk3vwfjpinmaijmybade8yrzsi03vtb/pub?start=false"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vtrczay3ggwgwoi1ivjmlxreksppg5wshm2lvd0whsepydeirk3vwfjpinmaijmybade8yrzsi03vtb/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vtvmjxbxi7jayndiskcyl23f1xcvezc5csjpzskikslvmtug6p4xcisbrskmaloncyyyknj43t9ineb/pub?start=false"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vtvmjxbxi7jayndiskcyl23f1xcvezc5csjpzskikslvmtug6p4xcisbrskmaloncyyyknj43t9ineb/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vtvuazpv80r-uok5627cqy0zicwu_nlc18huxuhrtlvsh3s-vnrtoolphdv6vfzl-1e4bbrdzsav6df/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vtwkjwy3_-kl8f5w9p6a1topb1ob0r15tijqhclejlxmwtsicqxiktafoxdxkehh4tlvfye7c6xs3og/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vtyk3k5l6rjyroqautl6ihvps6qr2mej97gule6j6shqf9ogvivlqxmpvgeh8kfkwaqf6lqte7wq9z2/pub?start=false&loop=false&delayms=3000"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/presentation/d/e/2pacx-1vtzkb0b5advguy08vx4ivalayp6bj1bqxautbdn9fbfuy6bubym5ouufhs08z7_d0bkfjdruz_y9sfz/pub?start=false&loop=false&delayms=3000#slide=id.p"; http_uri; nocase; content:"docs.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c/ejxnt9lowzaq_jr6jcpxnoqhdxrkjuoliccol2ptr9v0ciljcotrcsuqskvv7mh2zuejdfu-a4prxlbl22l1dknw5fpnfzcu_rjhgwekqtjlneqau5upway0l1src1eaiajqyijpdob7mlfpprymhxgltjvtj5fsk0bdrdgsmiw1fe4jlihthiuzz8wuponxscag6anwd2facqi2mxb9rjxp-fuq6lo_vdmee5sm4yg-pperbxtgorogbj6vnleuseckmmzebgavykymacmgfdpc6c9t4sdzvnawzi5vc13pd_olrcwfkvcbdq36frthtokmde1eo8hvk_l0bbkrx_uzcggtyv5d-tt-7stge9p_ojbyisrxjbqdwywur3djrtrunvxyt5s2e9d3y-2c06ufis_wugkpslplrcks_wyb8jdm"; http_uri; nocase; content:"docs.transactional.pandadoc.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200058415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/3a5r5a92ssx38jsi"; http_uri; nocase; content:"docsend.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/76ic85fc7kh726cu"; http_uri; nocase; content:"docsend.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/7kbaanzkgswcge6a"; http_uri; nocase; content:"docsend.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/83mf9fxsegs68kdj"; http_uri; nocase; content:"docsend.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/jd4wxg8qzwd3b34e"; http_uri; nocase; content:"docsend.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?m=0"; http_uri; nocase; content:"doufatin.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/styleguide/wp-content/scripts/chf/"; http_uri; nocase; content:"drapefit.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/file/d/19zpw90jgon3j5merxi1pauvkjdmx8nfq/edit"; http_uri; nocase; content:"drive.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/file/d/1bcdyitw2vo5jp6yrbdmiy8cfrkcf4tby/view?usp=drive_web"; http_uri; nocase; content:"drive.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/file/d/1c5o9_y8_octsepwyojfarn1k-kj4d9fe"; http_uri; nocase; content:"drive.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/file/d/1fdgs5g6fqqkudcl2meym63ua3yu0o-tb/view?usp=drive_web"; http_uri; nocase; content:"drive.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/file/d/1ginbnlpvt7kpfnog9a68fqmn7k3aivui"; http_uri; nocase; content:"drive.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/file/d/1hdvx7j89h5l7yz39idgzhqji93jnkl_c/view"; http_uri; nocase; content:"drive.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/file/d/1jixb69t_nw9tmkhvfrejkfzof3d-ijet/view"; http_uri; nocase; content:"drive.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/file/d/1qf58h-1lunq1pubplwdhwd3uooj_vjxa/view"; http_uri; nocase; content:"drive.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/file/d/1robiosanbh8doqa7yuiewn3akz4094ho/edit"; http_uri; nocase; content:"drive.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/file/d/1sf-ka2tuqr3-ievafi4ok5hjd4fsqqg1/view?usp=sharing_eip_m&amp\;ts=6302a657"; http_uri; nocase; content:"drive.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/file/d/1sf-ka2tuqr3-ievafi4ok5hjd4fsqqg1/view?usp=sharing_eip_m&amp\;ts=6302b395"; http_uri; nocase; content:"drive.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/file/d/1vcc1-wujbe-iacakickb5lk7pli9dhon/view?usp=sharing"; http_uri; nocase; content:"drive.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/lulu-hypermarket-careers"; http_uri; nocase; content:"dubaivacancy.ae"; content:"Host"; http_header; classtype:attempted-recon; sid:200058435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-content/aruba.it/aruba.webmail/arubaredirecti.php"; http_uri; nocase; content:"duobabiji.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?ref=agfuc2pvzxjnc0bnbxguzgu"; http_uri; nocase; content:"dyuvstyfawecteraw.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/owa/auth/logon.aspx?replacecurrent=1&amp\;url=https%3a%2f%2feast.exch082.serverdata.net%2fowa"; http_uri; nocase; content:"east.exch082.serverdata.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200058438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/amp/29559-vente-flash-le-samsung-galaxy-s7-edge-a-prix-reduit-chez-orange.html"; http_uri; nocase; content:"edcom.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200058439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/personal/marco_eeverywhere_com/_layouts/15/onedrive.aspx?id=/personal/marco_eeverywhere_com/documents/documents&amp\;originalpath=ahr0chm6ly9lzxzlcnl3agvyzs1tes5zagfyzxbvaw50lmnvbs86zjovcc9tyxjjby9fcwhvbeq1x3hltknorzbdmdvvmgjvvujoy1z3b25futjvejhtlwxqrg9svwvrp3j0aw1lpvduaunytfu4mlvn"; http_uri; nocase; content:"eeverywhere-my.sharepoint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200058440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dist/"; http_uri; nocase; content:"eki-net.com-aesaaceenent.lefzek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccceeaaa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacccesaaa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaccecceea.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceccesa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeeea.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceeeesa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacceoseea.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceccesoaa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeeaaa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeeesoaa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceeesaaa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaceosesoaa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacoseeaaa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200058999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesacosesaaa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaecceesaa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeccesoaa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeeesaa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeeeesoaa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeoseesaa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesaeosesoaa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/eki_ap/signin.php?_encoding=utf8&amp\;openid.assoc_handle=jpflex&amp\;openid.claimed_id=&amp\;action=sign-in&amp\;path=home&amp\;ref_=nav_account&amp\;signin=1&amp\;useredirectonsuccess=1"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesccosneisaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aescecsneiesa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceesneiesa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.comn-aesceosneiesa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacecceseaa.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceccessaa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececscee.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesacececsces.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceeseee.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceesees.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceceossee.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeccsesoa.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeeseaa.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeesesoa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeeessaa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceeossesoa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceoseseaa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaceosessaa.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccesesa.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeccessoa.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200059999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeesesa.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeeeessoa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosesesa.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesaeeosessoa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceea.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceea.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceea.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceea.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceea.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccceeaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesa.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesa.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccccesaas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.caddop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.harxlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.mllvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.qhlhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.qjnzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccceea.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.caddop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.harxlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.mllvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.qhlhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.qjnzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccesa.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescccosnseisa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccecceeaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceccesaas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeea.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeea.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeaas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeeeaas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeeesaas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesa.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesa.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesa.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesa.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesa.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceeesaas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseea.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200060999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceoseeaas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesa.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesa.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescceosesaas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseea.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseea.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseea.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccoseeaas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesa.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesa.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesa.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesccosesaas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/eki_ap/signin.php?_encoding=utf8&amp\;openid.assoc_handle=jpflex&amp\;openid.claimed_id=&amp\;action=sign-in&amp\;path=home&amp\;ref_=nav_account&amp\;signin=1&amp\;useredirectonsuccess=1"; http_uri; nocase; content:"eki-net.con-aesceccees.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccees.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccees.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceesas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.caddop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.mllvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.qhlhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.qjnzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecceso.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceccsnceies.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecesneeies.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescecosnseies.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccees.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php%20http://www.eki-net.con-aesceecceesas.ceqyni.top/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceecceesas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeccesoas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.caddop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.harxlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.mllvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.qhlhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.qjnzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeea.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeees.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeees.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeees.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeees.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeees.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeesas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeees.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeees.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeeso.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200061999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeesoas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.caddop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.harxlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.qhlhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.qjnzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeeeso.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.harxlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.mllvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesa.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeesaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosees.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosees.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseesas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseso.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseso.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeoseso.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceeosesoas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceosees.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseesas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.mllvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.qhlhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesceoseso.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.caddop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.harxlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.mllvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.qjnzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseea.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescoseeaas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.caddop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.harxlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.qhlhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aescosesa.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.harxlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.mllvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.qhlhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.qjnzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseccees.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.mllvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aesecceso.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.harxlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.mllvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/eki_ap/signin.php?_encoding=utf8&amp\;openid.assoc_handle=jpflex&amp\;openid.claimed_id=&amp\;action=sign-in&amp\;path=home&amp\;ref_=nav_account&amp\;signin=1&amp\;useredirectonsuccess=1"; http_uri; nocase; content:"eki-net.con-aeseeeees.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.qhlhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeees.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.caddop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php%20http://www.eki-net.con-aeseeeeso.devdjn.top/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.harxlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.qjnzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseeeeso.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.caddop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosees.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.mllvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.qhlhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.qjnzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseoseso.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"eki-net.con-aeseosesoas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeecsce.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeeesee.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaceeessne.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeccesaa.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeeeeesaa.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascaeesnesaa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceccea.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceccea.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceccea.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceccea.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccecceaas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200062999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceecceaas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeaas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceeeeeaas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascceesneaas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesnea.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asccesneaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.caddop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.harxlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.mllvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.qhlhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceccea.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.caddop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.harxlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asceeeea.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.mllvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.qhlhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-ascesnea.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeccseaa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceeeeseaa.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaceesnseaa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccesaa.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeccessa.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeesaa.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeeeeessa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnesaa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoaeesnessa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.caddop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.harxlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.qhlhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccea.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecces.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccesas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceccsnceis.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200063999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecesneeis.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocecssnneis.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccea.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccea.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccea.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecceaas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecces.qjnzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceecces.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeccesas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.harxlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.mllvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.qhlhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.qjnzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeea.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeeaas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeees.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeeesas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeees.harxlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeees.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeees.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeees.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeees.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceeeesas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnea.qjnzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesneaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnes.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnes.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnes.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoceesnesas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.mllvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.qhlhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.qjnzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnea.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnes.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnes.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnes.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asocesnesas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.caddop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.qjnzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeccea.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.caddop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.harxlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.mllvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.qhlhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.qjnzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoecces.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.caddop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.mllvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.qhlhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.qjnzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeea.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeees.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoeeeesas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.caddop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200064999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.qjnzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnea.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.harxlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.com-asoesnes.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeccea.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceeeeea.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaceesnea.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaecceaaa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaeeeeaaa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-ascaesneaaa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacecceaaa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaceeeeaaa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoacesneaaa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaecceaaa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeccesaa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeeaaa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaeeeesaa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesneaaa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoaesnesaa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocecsneisa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asoceesneisa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comm-asocessneisa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseccea.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acacseeeea.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascceaaa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acascmeaaa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-acaseeeaaa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200065999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-accscsneiaa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscceoaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmeoaa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacscmesaa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoacseeeoaa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascceoaa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.ialnzp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoasccesaa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmeoaa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.rxjjvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoascmesaa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.fmxkbg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeeoaa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.aeoxpp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.hppnkj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.ldowvh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.muaezk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.mzyaio.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.wiqnfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aoaseeesaa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.airrcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.dnzvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.ffzris.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.fxhpgz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.hwttnt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.iaigpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.iefvov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.kwntrl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.npcmvk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.srxjef.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.tkvynb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.uiwwax.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.vmxdtl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocscsneisa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.bjottf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.bqkzne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.bsuahj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.clcdan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.dzvklb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.eckudg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.ehnmzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.eubiqz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.flfnaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.fontek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.frqdjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.gifumc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.giltmf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.ihubim.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.imvjiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.jlevcj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.jmkqnj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.kkunyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.kzdqmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.lawqog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.lzqbia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.mroqjj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.nipldm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.nthuop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.nvlpro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.pvylbf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.rkhusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.rljrjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.rniirc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.shgssf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.ssnqtf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.tdehzx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.tqdvtw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.tqlcvt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.tugpxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.vmstjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.vpzrgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.xckjmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.xyihvb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.ydenaa.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.ywdvvn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.yzpbpt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.comnn-aocsesneisa.ztcztk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acacesecsce.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaceseesee.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseccesaa.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acasecmesaa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acaseeeesaa.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccea.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccea.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscceaas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsccsnmeia.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmea.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmea.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmea.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accscmeaas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseccea.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200066999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecceaas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmea.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmea.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmea.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accsecmeaas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeea.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeea.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeea.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeaas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-accseeeeaas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.harxlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.mllvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acsccea.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.caddop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.mllvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.qjnzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acscmea.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.caddop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.mllvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.qhlhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.qjnzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-acseeea.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacesccseoa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmseoa.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoacescmsesa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaceseeseoa.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccesoa.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseccessa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmesoa.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.rfrsrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoasecmessa.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.bduhhp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.ewrwsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.madcep.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeesoa.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.eyllel.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.utceyk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoaseeeessa.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.caddop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.mllvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.qhlhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.qjnzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscceo.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscces.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccesas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.bvwtoy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.cpgduw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.dgqlrd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.fpkfjv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.hbrkix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.lbxmsc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.nqvegf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.nuwjuw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.wbioif.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.ylxjny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsccsnceis.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.aovewv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.biyrzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.bkdgpm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.cetkdd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.cqrxxt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.dfpxov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.dhoqmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.ecanjp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.eelqlx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.ewrrqm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.fmdpfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.gqnrfx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.hzrliq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.jfmrie.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.jocmcv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.jtyytf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.ldafhf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.nefzhu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.nhyvtes.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.nxdkxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.ozjjhv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.qirlpi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.rpxccj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.rvmltt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.tibnek.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.ujejqr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.ujxuzs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.vbsdqc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.vfqmxf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.vwdmjb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.xjfokd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.yqeisg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.zbiyub.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscesneeis.zyobyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.caddop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.harxlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.mllvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.qjnzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeo.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmeoas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.harxlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.qhlhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.qjnzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocscmes.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceo.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200067999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecceoas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecces.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecces.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecces.qhlhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseccesas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeo.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeo.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeo.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmeoas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocsecmesas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeo.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeo.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeo.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeo.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeo.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.rjtmkd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeeoas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeees.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeees.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.ceqyni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.faokuk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.mvzyfc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.qkyqqw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.usbgeb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.wzpclp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.zjtrji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeesas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.caddop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.harxlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.mllvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.qhlhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeeo.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseees.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseees.qhlhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseees.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseees.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseees.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseees.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.acggmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.adyjox.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.asjdvg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.asjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.brhwcz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.bzjlsm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.crnxzg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.cxnpua.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.cxyrzh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.czatfo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.dcdbhe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.deehik.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.dkuc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.dwkxch.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.dzztwm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.elexdy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.ffreon.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.flqikb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.fnexck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.fxmffc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.fyvdku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.gbaiwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.gbqkjt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.gvjm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.gvoyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.gyhshf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.hlrooh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.hyhowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.iamqcq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.idgton.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.iidxia.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.iprzwh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.ixwhvl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.jecrzy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.jvuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.jyxeuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.latofm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.ldtlen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.mjhvde.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.mtbuiy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.mump.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.okhusg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.okxdbp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.ouvpkl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.oyqcaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.pehcvy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.piiyis.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.puazck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.pxsthw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.pyzqjk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.pzazgv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.qaxnzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.qfuhtb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.qhyaod.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.qigyji.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.qsnbpy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.qucc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.qvwhwf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.qyknpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.rzhtjo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.scah.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.sjkppt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.svmm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.taiujf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.tddonu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.thkray.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.trea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.txgkcn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.ucwxyw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.ujtv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.umpc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.vcuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.vnbncj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.vnfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.vrne.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.vwaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.w8ru34hw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.wdjsvq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.wiphfb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.wnrtmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.wplaog.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.xdtwpw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.xesana.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.xkqkrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.xlwcrv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.ywqcdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.ziwfwt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.zomoen.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.zrnrso.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.zttpjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.zukhro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aocseeesas.zynbuz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.mllvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscceo.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.caddop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.dztyhb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscces.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.harxlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.qhlhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.qjnzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmeo.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.caddop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.fyolsi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.harxlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.mllvaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.qjnzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.weurdk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.yjhdyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoscmes.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.bttdrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.caddop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.eskrmy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.fbuuwe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.harxlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.luqsbb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.nxyyrq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.ppyxbl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.pzsjix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.qhlhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.qjnzai.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.rzfqmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.tuyzzj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.vnohwy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.xbflae.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseeeo.zxorqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.caddop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.crlatg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.devdjn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.fkoapx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.futgud.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.fzbtab.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.gaoxok.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.grmejp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.gtczlv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.harxlt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.hguzea.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.jwlopm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.keiorc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.kkgfcx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.lwkopv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.lzlcjl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.maopzo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.miabca.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.mnnijd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.mozqjq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.odvath.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.qlopro.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.sdtjmc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.sjgjpz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.uqmzlf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.vatcbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.whyldu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.xfbwpj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.xfkkfe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.xiqahu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"ekl-net.conn-aoseees.ynhjni.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200068900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-admin/user/usr/login"; http_uri; nocase; content:"elbatt.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?m&#61\;0"; http_uri; nocase; content:"eleoelswka.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c/ejxlku2o3caqhu9jbyjbuicnfywszyyudq5g8voeybobpicj9o2d3c5eusqwrru8fe8v3rs_zglz3jlf2tsfle8jj8bki8cw48eg4tfsudfh4abieqtv6zohfun10e_a-c6xmhbjmztcrsm6zryfwynzr_sbsti4kulcaidrksixvbthrqsgsb2c38p9rfw8l99s1m7qxnrsy0fdgsoet1f1vsqag_a1gzd6klb_ioptvnwgrutallxlacnpqecu6ivvjtvk152yys_ou4y9yyllnhdgzandvvh1tldvl3nj2l58ek1pstqwdrft-gahtjuk0re5ysct6k4tgx3kcrwsi2bwtjfmwb9idtm4tlol1vfq9utc7fuby-nz4dx_xhtfpf7foyd_li5ghi3zmuxsnv66n5zsan2ibve_alhfvj81wm64elq_egzlwmlnhq1xuhdbjhiaccmmfrsgsaugow2ghrzv9j9gp4rwzvwghcw8tq"; http_uri; nocase; content:"email.c.kajabimail.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200068903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?url=https%3a%2f%2ftilbakebetalin.wpengine.com%2fsw%2flog%2f&data=04%7c01%7c%7c11af7bbcb8534b33863408d9e17cff46%7c84df9e7fe9f640afb435aaaaaaaaaaaa%7c1%7c0%7c637788749239190942%7cunknown%7ctwfpbgzsb3d8eyjwijoimc4wljawmdailcjqijoiv2lumziilcjbtii6ik1hawwilcjxvci6mn0%3d%7c3000&sdata=wyye%2fyjymouztvtdzw%2bfpfpyzj4nrvzhvloufqhq128%3d&reserved=0"; http_uri; nocase; content:"emea01.safelinks.protection.outlook.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/redirecionamento/1ge44"; http_uri; nocase; content:"encurtador.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200068905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?m=0"; http_uri; nocase; content:"eneeeetsowww.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/congue/core/index.html#a@b.com"; http_uri; nocase; content:"entreprisedeplomberie.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200068907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/login.php"; http_uri; nocase; content:"eop.shinko-et.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/:x:/r/personal/nradonich_ersfilter_com/_layouts/15/wopiframe.aspx?guestaccesstoken=t6t%2fhn1dkbyhlyx%2beimbazufa43rrgz6%2faaaewnocdi%3d&docid=1_18168db23429e45f29fdf2e7be120efc4&wdformid=%7bb9970f62%2d44c3%2d4d09%2d9929%2d6e1eb652da57%7d&action=formsubmit"; http_uri; nocase; content:"ersfilter-my.sharepoint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/personal/nradonich_ersfilter_com/_layouts/15/wopiframe.aspx?guestaccesstoken=6ywmlbqi9%20sjfgzhadhvte2gyowjf83iqbjrjehik4s=&amp\;docid=1_135f7008dfbfa44e6b09dab0eb165b997&amp\;wdformid={e037f2d9-5daa-4916-ba03-eb11d0aa6dea}&amp\;action=formsubmit"; http_uri; nocase; content:"ersfilter-my.sharepoint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/personal/nradonich_ersfilter_com/_layouts/15/wopiframe.aspx?guestaccesstoken=6ywmlbqi9%2bsjfgzhadhvte2gyowjf83iqbjrjehik4s%3d&docid=1_135f7008dfbfa44e6b09dab0eb165b997&wdformid=%7be037f2d9%2d5daa%2d4916%2dba03%2deb11d0aa6dea%7d&action=formsubmit"; http_uri; nocase; content:"ersfilter-my.sharepoint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/v1/app/gbwa/image/transformer/4573be1d04074ebfab8fbb16f21a65de"; http_uri; nocase; content:"esa.www.wamodshost.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?m=0"; http_uri; nocase; content:"esssschhh.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/t/43431940/1624857538/56733586/0/109770/?x=022e1138"; http_uri; nocase; content:"estadisticas.neored.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?m=0"; http_uri; nocase; content:"etyhyahshiuiuwey7hsddhgsd.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/17369aa91d5549c192b0f736d5822403:rr-frontpage/index.html"; http_uri; nocase; content:"eu2.contabostorage.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bt/secure.business.bt.com/app/index.php"; http_uri; nocase; content:"euvencendo.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200068917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/shard/s339/client/snv?noteguid=f48e12fd-48da-e57f-8e76-cdf6e4054e1d&amp\;notekey=02a9fa6bd051dc6b4581ee3b617b3f88&amp\;sn=https://www.evernote.com/shard/s339/sh/f48e12fd-48da-e57f-8e76-cdf6e4054e1d/02a9fa6bd051dc6b4581ee3b617b3f88&amp\;title=optus%20webmail"; http_uri; nocase; content:"evernote.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/shard/s446/client/snv?noteguid=4dc119ab-57d6-b8e0-4fcb-c11c0a637b94&notekey=9ddb3753cb700b0c86a78176be71f4f5&sn=https%3a%2f%2fwww.evernote.com%2fshard%2fs446%2fsh%2f4dc119ab-57d6-b8e0-4fcb-c11c0a637b94%2f9ddb3753cb700b0c86a78176be71f4f5&title=you%2bhave%2breceived%2ban%2binvoice."; http_uri; nocase; content:"evernote.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/shard/s446/sh/4dc119ab-57d6-b8e0-4fcb-c11c0a637b94/9ddb3753cb700b0c86a78176be71f4f5"; http_uri; nocase; content:"evernote.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/personal/tim_hansen_excelelectrical_com/_layouts/15/onedrive.aspx?id=/personal/tim_hansen_excelelectrical_com/documents/open%20to%20view%20shared%20document%20in%20hitech%20sharepoint&amp\;originalpath=ahr0chm6ly9legnlbgvszwn0cmljywwwlw15lnnoyxjlcg9pbnquy29tlzpmoi9nl3blcnnvbmfsl3rpbv9oyw5zzw5fzxhjzwxlbgvjdhjpy2fsx2nvbs9fa2zoazdydndfaettvl9pwulkctdzmejlveeyr3awzwjnsdfkrgdjrfdfttznp3j0aw1lpunrvevzrwxcmlvn"; http_uri; nocase; content:"excelelectrical0-my.sharepoint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0647412/index.php?email=#%26ua2i0e%23%26ua2i0e"; http_uri; nocase; content:"excelhana.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/r?us_privacy=&amp\;a=p-w_ayumw3pzr2w&amp\;labels=_qc.clk,_click.adserver.rtb,_click.rand.60541&amp\;rtbip=192.184.70.137&amp\;rtbdata2=eaaaiencvf9odwdnzxrzx1e0mjfftwfuywdlzf9tzxj2awnlimofncj-jtiws_b-ohnodhrwczovl3d3dy5syxcuy29twihbt0llsefpmvdcvwi0vmdxvi1julfbztjdullinvfzuuitwjdutjfpdu3bfukaayfd3aqeoaebqahv4fyeugeawahq-aniadv5u4til9obfllxavhtz0fpaghnqs1sufktuvntqkhlaarzydroawsyaviznracclocbmc4ronaagliagdqas7hhvv4n_fmqqhgagdoagd4agckaxywlnb1yi0xmjyxotkyndq0odazodc1mamaqamasgmejmh7angd_dgd4gmpcc13x0fzdu13m1baujj36gmfcngfefryawu5mjeymfgdaiaeayoedxf1yw50y2fzdc1xyzhybajvuw&amp\;redirecturl3=https://www.cbtnuggets.com/?utm_source=quantcast&amp\;utm_medium=prospecting&amp\;utm_campaign=general_us&amp\;utm_term=testimonial&amp\;qc_campaign=cbt_nuggets_q421_managed_service&amp\;qc_adid=2078771"; http_uri; nocase; content:"exch.quantserve.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/unlock.html"; http_uri; nocase; content:"exodus.com.merge.arkan.sch.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200068924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/unlock.html"; http_uri; nocase; content:"exodus.com.merge.brighthubacademy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/unlock.html"; http_uri; nocase; content:"exodus.com.merge.drinktolife.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200068926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/unlock.html"; http_uri; nocase; content:"exodus.com.merge.earkan.sch.id.arkan.sch.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200068927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/unlock.html"; http_uri; nocase; content:"exodus.com.merge.hetothem.show"; content:"Host"; http_header; classtype:attempted-recon; sid:200068928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/unlock.html"; http_uri; nocase; content:"exodus.com.merge.patservip.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/unlock.html"; http_uri; nocase; content:"exodus.com.merge.procremaxtwo.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200068930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/unlock.html"; http_uri; nocase; content:"exodus.com.merge.revealacode.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/unlock.html"; http_uri; nocase; content:"exodus.com.merge.shikkhokunion.tv"; content:"Host"; http_header; classtype:attempted-recon; sid:200068932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/unlock.html"; http_uri; nocase; content:"exodus.com.merge.voupify.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/hksr"; http_uri; nocase; content:"fanlink.to"; content:"Host"; http_header; classtype:attempted-recon; sid:200068934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/investorway"; http_uri; nocase; content:"feeds.feedburner.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/v0/b/aspire-127b7.appspot.com/o/dnd.html?alt=media&amp\;token=58da9567-441f-4f7b-bf07-290e808e5d8d"; http_uri; nocase; content:"firebasestorage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/v0/b/aspire-127b7.appspot.com/o/dnd.html?alt=media&amp\;token=58da9567-441f-4f7b-bf07-290e808e5d8d#hughesmichaela06@gmail.com"; http_uri; nocase; content:"firebasestorage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/v0/b/cardilogist91983.appspot.com/o/index.html?alt=media&amp\;token=40dc7341-52e7-495f-8ba3-04f739b67ca0#@yorku.ca"; http_uri; nocase; content:"firebasestorage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/v0/b/dr-clin-c4f68.appspot.com/o/drweb.html?alt=media&amp\;token=09293ba9-0738-41ea-9cf3-67cb43af2b88&amp\;x=famacas-cfa0appspotappspotmacas-macas-vfwefsaxsppspotcfa0ps&amp\;prox=p2000isolation@aaa.kr"; http_uri; nocase; content:"firebasestorage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/v0/b/dr-clin-c4f68.appspot.com/o/drweb.html?alt=media&amp\;token=09293ba9-0738-41ea-9cf3-67cb43af2b88&amp\;x=famacas-cfa0appspotappspotmacas-macas-vfwefsaxsppspotcfa0ps&amp\;prox=yourname@yourcompany.com"; http_uri; nocase; content:"firebasestorage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/v0/b/okorocha-9d683.appspot.com/o/indexxevol.html?alt=media&amp\;token=f9ee1486-b8df-4f55-8b9c-466fcdcf99a9#@yorku.ca"; http_uri; nocase; content:"firebasestorage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/v0/b/ooiiuuyttrre.appspot.com/o/index.html?alt=media&amp\;token=eb5c6c41-a7e2-4853-ac94-cf8e552e3386"; http_uri; nocase; content:"firebasestorage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/v0/b/outlook-4c0f2.appspot.com/o/books%2fwebmail.htm?alt=media&amp\;token=216401d2-aba7-42f4-8fd5-9b672cade830#abuse@optusnet.com.au"; http_uri; nocase; content:"firebasestorage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/v0/b/outlook-4c0f2.appspot.com/o/books%2fwebmail.htm?alt=media&amp\;token=216401d2-aba7-42f4-8fd5-9b672cade830#tiekimas@tidlo.lt"; http_uri; nocase; content:"firebasestorage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/v0/b/pass-up-date-now.appspot.com/o/update-update-update%2findex.html?alt=media&amp\;token=d3144df5-bf15-4058-a0dc-9610b1a9193c#email=info@domain.tld"; http_uri; nocase; content:"firebasestorage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/v0/b/preserving019029.appspot.com/o/index.html?alt=media&amp\;token=caa885e7-5275-4bde-bc3d-a3eb2c95dfee#r@yorku.ca"; http_uri; nocase; content:"firebasestorage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/v0/b/rei-rezuio-rexire-565.appspot.com/o/%40%40%40indexv-vb-vau-ry-8%252fbv-yu-er-8f%25252525%2525252f%25252525%2525252f%25252525%2525252f%25252525%2525252f%25252525%20-%20copy.html?alt=media&amp\;token=da92acdd-870d-4049-b9ac-f0d373777f06#info@legalshield.com"; http_uri; nocase; content:"firebasestorage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/v0/b/rned-a824v.appspot.com/o/gen%252findex2oli.html?alt=media&amp\;token=828c2259-c86f-442e-91a0-8d43a1fe7d8b#abuse@optusnet.com.au"; http_uri; nocase; content:"firebasestorage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/v0/b/rtzmthtcnncttoaccs.appspot.com/o/index.html?alt=media&amp\;token=8d757dc9-62a7-4c67-b241-997916e540f2"; http_uri; nocase; content:"firebasestorage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/v0/b/scnzmaccsscnncttw.appspot.com/o/index.html?alt=media&amp\;token=fe08a148-55d4-4bb8-8d3a-53479440818f"; http_uri; nocase; content:"firebasestorage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/v0/b/tei-neriou-reuix-678.appspot.com/o/%40%40%40indexv-vb-veu-ry-8%25433%2569.html?alt=media&amp\;token=6b0a9c43-8711-491b-9f40-50ad280ffb32#ggradnigo@prepaidlegal.com"; http_uri; nocase; content:"firebasestorage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/v0/b/tex778966.appspot.com/o/index.html?alt=media&amp\;token=03b0ea44-5387-4985-ac5c-d90a3a4d0e1a"; http_uri; nocase; content:"firebasestorage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/v0/b/update-d2e45.appspot.com/o/update%2fupdate%2findex.html?alt=media&amp\;token=ca2d4bde-8124-4812-9c7a-1ff88eb47549#@yorku.ca"; http_uri; nocase; content:"firebasestorage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/:o:/g/personal/lewis_webb_firstfederation_org_uk/eid78dus_cfjrrv2swyzp-ob1udpvku1sjneglgmz_0zwa?e=dcj1hk"; http_uri; nocase; content:"firstfederation-my.sharepoint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/servicecu/"; http_uri; nocase; content:"fitjt.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/imagex/ahr0cdovl2fscghhlw1hcmtldgluzy5vbmxpbmuvb3b0dxmvymlsbc8=v"; http_uri; nocase; content:"flackbox.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/p/13c1ofsbi?fc=0"; http_uri; nocase; content:"flowcode.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/p/13wrz1ibd?fc=0"; http_uri; nocase; content:"flowcode.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/p/1s6hcovwa?fc=0"; http_uri; nocase; content:"flowcode.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/p/1s6jiqmub?fc=0"; http_uri; nocase; content:"flowcode.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/p/1sbjwytzo?fc=0"; http_uri; nocase; content:"flowcode.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/p/1scqelfiy?fc=0"; http_uri; nocase; content:"flowcode.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/p/1shwmjpay?fc=0"; http_uri; nocase; content:"flowcode.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/p/jsoo0zbqr?fc=0"; http_uri; nocase; content:"flowcode.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page/bt1"; http_uri; nocase; content:"flowcode.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page/bt908comms"; http_uri; nocase; content:"flowcode.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page/btcommupgrade8"; http_uri; nocase; content:"flowcode.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page/btinternet09800"; http_uri; nocase; content:"flowcode.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page/btpro5353"; http_uri; nocase; content:"flowcode.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page/btupgrade0"; http_uri; nocase; content:"flowcode.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page/hip"; http_uri; nocase; content:"flowcode.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page/j50"; http_uri; nocase; content:"flowcode.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page/virginmedia0010"; http_uri; nocase; content:"flowcode.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/page/xpsatt"; http_uri; nocase; content:"flowcode.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/203573266844865"; http_uri; nocase; content:"form.jotform.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/221027503251138"; http_uri; nocase; content:"form.jotform.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/221186654354155"; http_uri; nocase; content:"form.jotform.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/221892180514050"; http_uri; nocase; content:"form.jotform.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/222425861915155"; http_uri; nocase; content:"form.jotform.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/222518531036146"; http_uri; nocase; content:"form.jotform.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/222888672405061"; http_uri; nocase; content:"form.jotform.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mimig8510/clone-of-formulario-de-pago-dhl-exp"; http_uri; nocase; content:"form.jotform.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200068982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/s2tp4"; http_uri; nocase; content:"formaloo.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200068983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1mqqu8exzgpptqpl8"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200068984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5wjuv4glrx78xun4a"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200068985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8epxhwdapiab7mfw7"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200068986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8oszgml1rvofdvtv7"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200068987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8vb7wfyzcoeb6vvj8"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200068988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9bwawhpz5vi7ilpe6"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200068989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/akohiguxjs9wlpu28?sllqm"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200068990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b7lqaal42juffiw1a"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200068991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bfz2l7i3wvrp5heb9"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200068992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cfqg5uz57ehywkhp7"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200068993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cqzwfmqvrsnm7wrq9"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200068994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ebzfzb9xvdfb2clz9"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200068995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ejefrdpmyoad4gm58"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200068996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/eozlrnnf7jh84xdp8"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200068997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fc47eidpg6e64gkt5"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200068998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fvaq9zhxfhgqbusw9"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200068999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fzlons3fgnjdqdd19?omgbfzrazhlppbtx"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200069000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/giwukhx8jkyq4jw7a"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200069001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/goerpntl5tfeumdz6"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200069002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/iai7pzm4pxyb145i9"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200069003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jnkkauxwwbfhtuqz9?hkgotygikyoujp"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200069004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jzxtb9auexgjcewfa"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200069005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/kadtekzswcevrtz38"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200069006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/kehch96avaku7oey7?akowgmooutpwa"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200069007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mpkhrpn3jc8pqv7j6"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200069008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mwctig62j4y5mgm3a"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200069009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/nokye42b5qkubgnt9"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200069010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/puadbxscibgw5ma79?xfccuwmmhgwrwztd"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200069011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/pyctmmwvnsyf2icj9"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200069012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/qxxe9xuu3h1lgpyc9"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200069013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/rwpcmhm8vtfa7f4m8"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200069014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/sj21ehdebhkcpvfv6"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200069015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/smufgmyhduckbq6ka?fjxhgyroek"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200069016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/swwpzakt11x6mtt37"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200069017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/uqzzznxv4cfhu3yr9"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200069018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/v5xtnywt5s6zvpp27"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200069019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/w6uh9p66tdq6l1m66"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200069020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/x3aasffazsrl8pcr9"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200069021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/xxjqmu6luzkpnalg6"; http_uri; nocase; content:"forms.gle"; content:"Host"; http_header; classtype:attempted-recon; sid:200069022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/5ed641e5cabd481304386f35b9120276/"; http_uri; nocase; content:"forms.monday.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/5ed641e5cabd481304386f35b9120276?r=use1"; http_uri; nocase; content:"forms.monday.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/a40bd53ec5083177dc9736547bd409b1?r=use1"; http_uri; nocase; content:"forms.monday.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/deef05667ad4b4a16abdf4cb6da54137"; http_uri; nocase; content:"forms.monday.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/pages/responsepage.aspx?id=95vlqxxdseiozn16dgibdsdprn5ritrknkwe8o-kcqduntbduvdwsutpqzzcmk85mfdrsjk1u0pats4u"; http_uri; nocase; content:"forms.office.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/pages/responsepage.aspx?id=dqsikwdsw0yxejajblztrqaaaaaaaaaaaan__gdpmarun1y5qlrqnjbkuvlhuvgyu0q1q1axszg2wi4u"; http_uri; nocase; content:"forms.office.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/pages/responsepage.aspx?id=dqsikwdsw0yxejajblztrqaaaaaaaaaaaanaauvucvpuqzngvly2rte2mfbws0u5rdnyredwte9rmi4u"; http_uri; nocase; content:"forms.office.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/pages/responsepage.aspx?id=dqsikwdsw0yxejajblztrqaaaaaaaaaaaao__tdasqlurfrqmjzxneyxn0g3vexutfvzq0mztu9fms4u"; http_uri; nocase; content:"forms.office.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/pages/responsepage.aspx?id=dqsikwdsw0yxejajblztrqaaaaaaaaaaaao__thg5xvuodnbwtvytzhwwdnctknvovo4tldctexmvi4u"; http_uri; nocase; content:"forms.office.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/pages/responsepage.aspx?id=jrbxvx3x9keewcq72hm6fnkqekonandcsjd9av060h5urepumvvgmks2te41rfewmlletulvufnuqy4u"; http_uri; nocase; content:"forms.office.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/pages/responsepage.aspx?id=ohdyclicseeuggrjwocnyc_obsknc9faprsbco6mlnhurtnevvdzuzzewddiq0xoskixulbontdsrs4u"; http_uri; nocase; content:"forms.office.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/r/ne89gvwrye"; http_uri; nocase; content:"forms.office.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/r/v0rrdpppff"; http_uri; nocase; content:"forms.office.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/247michaelbryan/form/signinyourbtaccountcorrectly1"; http_uri; nocase; content:"forms.zoho.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/pattles066/form/signinyourbtaccountcorrectly"; http_uri; nocase; content:"forms.zoho.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/traskray168/form/signinyourbtaccountcorrectly1"; http_uri; nocase; content:"forms.zoho.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/armandb622/form/signinyourbtaccountcorrectly"; http_uri; nocase; content:"forms.zoho.eu"; content:"Host"; http_header; classtype:attempted-recon; sid:200069039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mucmddc993/form/signinyourbtaccountcorrectly"; http_uri; nocase; content:"forms.zoho.eu"; content:"Host"; http_header; classtype:attempted-recon; sid:200069040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f/xeqpzwjl"; http_uri; nocase; content:"formspree.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/click?aizav30y8z8nubpqfblspwaaagcpwhdap8askgr_7j8trybeprb1pzdbzad2go9pt9bcty7-hw_fw_diaaaaaiplhaghiaaanaiaaaiaaablthyw3qaxaaaaaabvu0qavvneacwb-gdj7waaaaabagucaaaaamwa7yswuaaaaaa./bcr=aaaaaaaa8d8=/cnd=!5rmgjajkxmoxemvs2rabgn7bxiaakaaxaaaaaaaaaaa6cuzsqte6ndqym0cdl0lrn47hdftqp1eaaaaaaaaaafkaaaaaaaaaageaaaaaaaaaagkaaaaaaaaaaheaaaaaaaaaahgaiqeaaaaaaadwpw../cca=njy4i0zsqte6ndqymw==/bn=92921/clickenc=https%3a%2f%2fauth-sign-ovy86i2igkp45g6ao6ux7a2y10q4057hf8m9v0lg.website.yandexcloud.net"; http_uri; nocase; content:"fra1-ib.adnxs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/service563/index.html"; http_uri; nocase; content:"fra1.digitaloceanspaces.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cejbeabpdfdoc/"; http_uri; nocase; content:"gertrudeandmargaret.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mylogins.cso.web.com/"; http_uri; nocase; content:"ghlexperts.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2022/01/daily-rm8888-shopee-1_23.html?m=1"; http_uri; nocase; content:"gift-1212.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/index.php#faq"; http_uri; nocase; content:"globalbullsnft.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/action/browser.asp?returnurl=https://ipfs.fleek.co/ipfs/qmwqjnykp2odee27lzeezjkcgqqkwn7uwz3qej1dyyjhsj/slim.html"; http_uri; nocase; content:"gnacsports.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/o/free/?elqcampaignid=9288/"; http_uri; nocase; content:"go.docusign.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?xcust=2c8967cc0ec911ec9332aea895ef3e670int&amp\;test=off&amp\;id=355x561&amp\;url=https://www.paypal.com/shopping/&amp\;xguid=01fez46yyrvh6f0bbehn8h419h&amp\;persistence=1&amp\;checksum=069f46345ac935567ad562a3d64a332066064c97f8feae803d555f9cc820c561"; http_uri; nocase; content:"go.skimresources.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?xcust=2c8967cc0ec911ec9332aea895ef3e670int&amp\;test=off&amp\;id=355x561&amp\;url=https://www.paypal.com/shopping/&amp\;xguid=01fezncfbjbj86yneatjn0qvt4&amp\;persistence=1&amp\;checksum=8142350e161acc6cb246be1d05d596973a1d3ac50af1f3594ee9ea462c87a4ef"; http_uri; nocase; content:"go.skimresources.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?xcust=2c8967cc0ec911ec9332aea895ef3e670int&amp\;test=off&amp\;id=355x561&amp\;url=https://www.paypal.com/shopping/&amp\;xguid=01ff06m6n2q43m6zcaqrh8xpm2&amp\;persistence=1&amp\;checksum=26e140f8abae23dd0c8dd547390a4deb9fc54b1acf3539d8aa44fb19e04902ef"; http_uri; nocase; content:"go.skimresources.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?xcust=2c8967cc0ec911ec9332aea895ef3e670int&amp\;test=off&amp\;id=355x561&amp\;url=https://www.paypal.com/shopping/&amp\;xguid=01ff0qxy635yfpkrdaxav47j5k&amp\;persistence=1&amp\;checksum=cb2e0f7328d6ffea0e15a24046095a0bb98d27d4488e822bea4b181763f2eb0b"; http_uri; nocase; content:"go.skimresources.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/aksf"; http_uri; nocase; content:"goo.su"; content:"Host"; http_header; classtype:attempted-recon; sid:200069054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/url?q=https://spk-kunden-manager.com/rcjju7exxu#1lwkr92k20x&sa=d&sntz=1&usg=aovvaw1sjseir4b0q4l8sbg3z3us"; http_uri; nocase; content:"google.ch"; content:"Host"; http_header; classtype:attempted-recon; sid:200069055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/url?hl=en&amp\;q=https://quarantine29042022app-1311615844.cos.ap-chengdu.myqcloud.com/aaqkagm3ztm2odcyltawzgmtndk3ns05zjuxltixzmyyyznkntexmgaqadpitonhie1hjl70qeb7vdi-quarantine02719message283/quarantine.html%23pimo@apms-ltd.com&amp\;source=gmail&amp\;ust=1654842023923000&amp\;usg=aovvaw3tlbzf2sxh2-mtjs7iurao"; http_uri; nocase; content:"google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/url?mo=78986685794&q=https://c1r.at/h49xmdcp&zp=5095739289&kf=59242331&sa=d&usg=afqjcnf_3jyqkupfmf1gle_0jmhtak3s0w"; http_uri; nocase; content:"google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/url?q=http%3a%2f%2fbit.do%2ffsgjq&amp\;sa=d&amp\;sntz=1&amp\;usg=afqjcngvqc30z-4hiaizv03gpwblwu3vnw"; http_uri; nocase; content:"google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/url?q=http%3a%2f%2fcanarytokens.com%2farticles%2fterms%2fimages%2f6273376tgy8lrrnek9ai08a01%2fredirect.html&amp\;sa=d&amp\;sntz=1&amp\;usg=aovvaw20yd4y6h3k2ostqzlu8pmd"; http_uri; nocase; content:"google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/url?q=http://nouvelles-hybrides.fr/wp-admin/general/hhhheng/hhhheng/hhhhh.php?email%3d%5b%5b-email-%5d%5d&amp\;source=gmail&amp\;ust=1648980902684000&amp\;usg=aovvaw3lj6xdrkr7te65my0ifv8q"; http_uri; nocase; content:"google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/url?q=http://www.customer-portal.info:8081?rid%3d92360zx%26pcode%3dpztnt&source=gmail-imap&ust=1664953377000000&usg=aovvaw0vpjehqhb1nmi-zmwqaqm2"; http_uri; nocase; content:"google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/url?q=https%3a%2f%2f094847.webflow.io&amp\;sa=d&amp\;sntz=1&amp\;usg=aovvaw2kpvsektuckv0n_xmzf-pi"; http_uri; nocase; content:"google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/url?q=https%3a%2f%2f420-cz.weebly.com&amp\;sa=d&amp\;sntz=1&amp\;usg=aovvaw0wjz4j_nhlgaiurii-nfp1"; http_uri; nocase; content:"google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/url?q=https%3a%2f%2f51.fi%2fai6n&amp\;sa=d&amp\;sntz=1&amp\;usg=aovvaw3ztrphk75w64vrj-rkdbza"; http_uri; nocase; content:"google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/url?q=https%3a%2f%2fpo9cz.weebly.com&amp\;sa=d&amp\;sntz=1&amp\;usg=afqjcnec0vbdyqyotdsbz7gijk588avcwg"; http_uri; nocase; content:"google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/url?q=https%3a%2f%2ftestwordpress.top%2fwp-content%2facaynumpang.html&sa=d&sntz=1&usg=afqjcneq22nczpte3zh2zdvetbj9kx5z1g"; http_uri; nocase; content:"google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/url?q=https%3a%2f%2fvip.91234567.cn%2fwp-includes%2firsapi1.html&sa=d&sntz=1&usg=afqjcnfo-ujbo-tnv5d6why8olvgunjxjq"; http_uri; nocase; content:"google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/url?q=https%3a%2f%2fvk.cc%2fcbjxkb&sa=d&509=848&usg=afqjcnec4gkgoe88ifnjjrnagnlez6uneq"; http_uri; nocase; content:"google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/url?q=https://393512dfd8544c98be9a40f2f67df8bd.svc.dynamics.com/t/r/a7uua5shyiplufx4zj7f6u2clgtguiagoxngfoio4am?clientid%3d70000%23%5bemail%5d%2b00-70000&amp\;source=gmail&amp\;ust=1636719774661000&amp\;usg=aovvaw2fsk8htfwhsfqapvbu674n"; http_uri; nocase; content:"google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/url?q=https://c1r.at/fzleuule&ry=9080899&sa=d&ha=9992286639&usg=afqjcngde0oxaxjtp-semb24qndyxqpfeg&jj=95316071"; http_uri; nocase; content:"google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/url?q=https://c1r.at/n62bfdcp&od=3896761062&sa=d&usg=afqjcnhmj6a5ejlmnfnws314axi9thcopa&qw=69345649672&rh=90290680"; http_uri; nocase; content:"google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/url?q=https://ipfs.io/ipfs/qmpovsvevlyhp2gj6vfhkqvhaydz1o7y2xn3xt87kkghtv%23%5bemail%5d&amp\;source=gmail&amp\;ust=1663915474090000&amp\;usg=aovvaw1usggtmp1ivavtzsxcz8g1"; http_uri; nocase; content:"google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/url?q=https://shiny-field-9548.on.fleek.co/?node-hash%3dqmzx2h92h51hopkxgfoaxkbjsymzqxuyxyfkw74s3qgcf1%26ci%3droy.libarious@alsaad.com.sa&amp\;source=gmail&amp\;ust=1660041395315000&amp\;usg=aovvaw1qsi_dkkhcsntjrcbe6ewe"; http_uri; nocase; content:"google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/url?q=https://spk-kunden-manager.com/rcjju7exxu#sx0z5vskhyx&sa=d&sntz=1&usg=aovvaw3wt2smooknv0nq-tlwykit"; http_uri; nocase; content:"google.vg"; content:"Host"; http_header; classtype:attempted-recon; sid:200069074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/i?u=a894ec7f.46t33454t4.pages.dev?user=masoli@legalshieldassociate.com"; http_uri; nocase; content:"googleweblight.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/i?u=b4e921f0.sso-mailsrvr-4344e5teed.pages.dev?user=abuse@gmail.com"; http_uri; nocase; content:"googleweblight.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/i?u=https://webmailn0s9344.myssomailsecure-srvr3.ws24.biz/index.html?submit=redacted@redacted.tld"; http_uri; nocase; content:"googleweblight.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/:x:/r/personal/tspencer_gormanusa_com/_layouts/15/wopiframe.aspx?guestaccesstoken=wgfwcmmssvdsofa7ljviwaj85tleclug2xbvoqwlmp0%3d&amp\;docid=1_12424441d8c29412bb868684e5cb74e47&amp\;wdformid=%7b992e319a%2dbe72%2d460b%2db6b4%2d2d3fcf789fc5%7d&amp\;action=formsubmit"; http_uri; nocase; content:"gormanusa-my.sharepoint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fwdfgr/jrhef.html"; http_uri; nocase; content:"greenmoneymanagement.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/inc/sbb-ch/ticket/torsion/"; http_uri; nocase; content:"h1bcertified.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dshao"; http_uri; nocase; content:"han.gl"; content:"Host"; http_header; classtype:attempted-recon; sid:200069081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2021/12/window.html"; http_uri; nocase; content:"hangovertest1.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-includes/.../?i=i&amp\;0=info@google.com"; http_uri; nocase; content:"hatocorozal.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"headlinescurrent.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0009977323/"; http_uri; nocase; content:"heylink.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/secure/id/index.php"; http_uri; nocase; content:"higherselfdevelopment.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/free-people-dresses-free-people-17391659834/"; http_uri; nocase; content:"hikingthesouthwest.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/nrtvkz"; http_uri; nocase; content:"hotm.art"; content:"Host"; http_header; classtype:attempted-recon; sid:200069088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/vpib5oq/"; http_uri; nocase; content:"hotm.art"; content:"Host"; http_header; classtype:attempted-recon; sid:200069089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wncom1b"; http_uri; nocase; content:"hotm.art"; content:"Host"; http_header; classtype:attempted-recon; sid:200069090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?http://dogosoft.com.ar.ca9.toservers.com/slashclick.php"; http_uri; nocase; content:"href.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200069091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?https://dplux.com.ng/cgi-bin/"; http_uri; nocase; content:"href.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200069092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?https://free-url-shortener.rb.gy/"; http_uri; nocase; content:"href.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200069093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?https://ib.adnxs.com/seg?redir=https://secure.adnxs.com/seg?redir=http://owl.li/pphv30sb9tt"; http_uri; nocase; content:"href.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200069094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?https://m0-online-infov4.duckdns.org/auth.php"; http_uri; nocase; content:"href.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200069095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?https://trimurl.co/0wsx7z"; http_uri; nocase; content:"href.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200069096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?https://www.aquarelle.es/tienda/ramos-de-rosas/"; http_uri; nocase; content:"href.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200069097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?https://ykm.de/f4b990c239777330"; http_uri; nocase; content:"href.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200069098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?https://yuzurihah.duckdns.org/9e9q1tj?userid=yl3czfei"; http_uri; nocase; content:"href.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200069099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/https://aratera.com/wp-admin/"; http_uri; nocase; content:"href.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200069100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/https://bestanimakers.com/fwdirs?irs-gov.data=sa01331mnq"; http_uri; nocase; content:"href.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200069101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/https://performancelocal.com/wp-admin/"; http_uri; nocase; content:"href.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200069102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"//ykm.de/f4b990c239777330"; http_uri; nocase; content:"href.li?https:"; content:"Host"; http_header; classtype:attempted-recon; sid:200069103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ebuse/servic"; http_uri; nocase; content:"i-m.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200069104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/webaccountupdate/stockholmsuniversitet/"; http_uri; nocase; content:"i-m.mx"; content:"Host"; http_header; classtype:attempted-recon; sid:200069105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/prostars/index.html"; http_uri; nocase; content:"idola.net.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mdkea5ckpozm/click-here-to-start"; http_uri; nocase; content:"ifyufyujk.quip.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/notice/"; http_uri; nocase; content:"iijmobile.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200069108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jgjkdfjkgd"; http_uri; nocase; content:"il317.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200069109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/free/4t6u/bt"; http_uri; nocase; content:"im-creator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/free/4t6u/e"; http_uri; nocase; content:"im-creator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/free/att8/23"; http_uri; nocase; content:"im-creator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/free/btbroadband/bt_broadband"; http_uri; nocase; content:"im-creator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/free/btin/bt"; http_uri; nocase; content:"im-creator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/free/fgjjm/1-xp"; http_uri; nocase; content:"im-creator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/free/iuhj/kay"; http_uri; nocase; content:"im-creator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/free/kennymoore12/btinternet"; http_uri; nocase; content:"im-creator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/free/kfouo/btcommmms"; http_uri; nocase; content:"im-creator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/free/lasodi2/attworld"; http_uri; nocase; content:"im-creator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/free/lobby02/attusers"; http_uri; nocase; content:"im-creator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/free/lofty2/mobileatt"; http_uri; nocase; content:"im-creator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/free/microvalid/bt_mail"; http_uri; nocase; content:"im-creator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/free/microvalid/btcomms"; http_uri; nocase; content:"im-creator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/free/microvalid/btcommuni"; http_uri; nocase; content:"im-creator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/free/msw0rd/att_word"; http_uri; nocase; content:"im-creator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/free/msw0rd/attsusers"; http_uri; nocase; content:"im-creator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/viewer/vbid-0489b514-omsttuer"; http_uri; nocase; content:"im-creator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/viewer/vbid-31138d48-omsttuer"; http_uri; nocase; content:"im-creator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/viewer/vbid-f6c84249-abbmfckb"; http_uri; nocase; content:"im-creator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/viewer/vbid-fa0f29d5-fpsjmms8"; http_uri; nocase; content:"im-creator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?utm_source=facebook_desktop_feed&utm_medium=st1&utm_campaign=pzrd21930&utm_content=robotnik&pxl=1177721166169448&pid=hlffey&qwermo8i=1"; http_uri; nocase; content:"imcket.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/viewer/vbid-fa0f29d5-fpsjmms8"; http_uri; nocase; content:"imcreator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/free/emailupdatee/owaweb"; http_uri; nocase; content:"imxprs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/free/outlookwebaccessupgrade/outlookwebaccessupgrade"; http_uri; nocase; content:"imxprs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/free/webmaiil/accounttportal"; http_uri; nocase; content:"imxprs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/238eae4e-7809-488b-8a61-99e7f7b20111"; http_uri; nocase; content:"indd.adobe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/fb9cd6d3-7d96-43f6-8377-533f39e3c7f5"; http_uri; nocase; content:"indd.adobe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/index/user/login.html"; http_uri; nocase; content:"inpusdt.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9g9h"; http_uri; nocase; content:"inx.lv"; content:"Host"; http_header; classtype:attempted-recon; sid:200069139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9git"; http_uri; nocase; content:"inx.lv"; content:"Host"; http_header; classtype:attempted-recon; sid:200069140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9gkk"; http_uri; nocase; content:"inx.lv"; content:"Host"; http_header; classtype:attempted-recon; sid:200069141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeia6ano5rwklrhhxag3jyadrix7slh4v4wwo2g3xwsdowd4rx4eulm"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeia6h2ry3xtpcpydja27atrlus2vzb5pj4jhww67i4jwyvvddw4anm/secure.html"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeiagbszmg7i45qtecbq22b2qssbfloccz2w5jlblcdrpd6pe4grnom"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeiao4cz3ukl77rw54haby2ewtrlbydwkce7qd6bon7k7jathvzjo5u"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeiaybftnsiyyledg5oa64cg7keonrjekxdeplt7ljzdhnlfjixyho4"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeibe2v2a2hgl7gej3luv5ev56gizmzhwf3uoc3ldtrwowm2sc5ibzy#accounts@centrica.com"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeibhujsh5zaoffxjbdtdot2lp5txzdgoetdlhjphrvvogr72sryev4/rectify.htm"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeibyq726xw2bjoa26ywdq2umwd3h4hcxkd7jx4bmnzafj7vciym4y4"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeic4olp55f7k6djfpg7atntw4x4ibo2t3cxbtxpvf5ptvgdzrjmu5a/"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeicep6fg7hqugbze5xd3eceagkcdkj7sn5rg7nttpfvc6jiggaboyi#x@x.com"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeicnmdc6n5j3j74ijummoc3iyhyql5zjilluhul73eomnmpwtfmv5i"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeicqyn6jliwpp5zfl4ybbuvx67azwr65vg4ssd3teg7rfozfusoipi#redacted@ionos.com"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeicrblumvgt2i6uwx5rwnh6h56vjrdvmernhhzwgu3lmgh7f3ynak4"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeict7qf5wqksu5js5snivdsvs7zm4ah2e5zjoffx6hxmkcfuyvg3ai"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeid2qwr7aat5nikj5ymfa5ln5mwpqymr6tfpsw5cojr3qfc277ig6y#hgasjdhagjd@outlook.com"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeidf6fbytriqnqkvq5cnlguo7o2s4zcxmaqnj3q3pagci4nntptk5i#eimaste@stinpriza.org"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeidp5nevwvbyywah7vbeo5da3nhcx6keyvx46y6tt5y6k2jpl3j3yi"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeids4xhynguua5fkrr47trwe6i7eqrq2cjmcor4afva5t4fcql7oa4"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeidss4vk7a3366lm256nv33tkmwr7lotgnkjxdcftwdsmvbjwrgpi4"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeidyhqyk3o4m7vlwrkcnt3zvjgeu2l52natkfpaha6bixqnoo5giqa"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeidyhqyk3o4m7vlwrkcnt3zvjgeu2l52natkfpaha6bixqnoo5giqa#admin@example.com"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeiebgng7rudsc7pumuk3mczfc3dmh75chcafw7untvjagi22n6thbi"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeiek4tmqxgm3twb7a2iqopf6sxvb3qmir6vrx7hxqk5eo4ucqawa2m"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeiew3kqovi4w24krkzgf55ov7kpzz4cr6jwmvabinvgnqh3ipkrhje"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeieyf7wmwaiy7xmar2kzmg3q4soy6bmm7fxusg4oy7isi26kpnvdzq"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeif422ty2en5jsnlvf7treitkmstfkg4z6vbjtc5dxp3gmn2o6qeri"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeifatiflhlbavi2sdhdupez3scj2sx2nagussxzjbtlqtdudwexriq"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeifbt3njw52o6i5p3xcnpccmkuqts54ic4dii4uiose5fsl3ildbdu"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeifcaoq3tvs6ekjpf42j26p5mqzpsvjloqshshl42pyzi7a3jooqu4/#william@nabaza.com"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeiftv3qjx7ysh4a4kvyb7wxbmriqfyih3b6djaaoaj4gyorgodge3i"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeig2lvfppozmrjklc26ge6qkpmmwqnodcskxnuog33rhgqz7gzcbzm"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeig6ejnuun2ejcz4uuztn3r3wahbfb57qbyeuifoflixoq3se3e43m"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeiggw63lcdef5tsis22jkixcza42ong35tmbrxjgrvkuzpmy7qn6iq"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeigjk3q6zxiuqwhb573ogx53qpiezghvuxqpre5qhxeyesbx4xblxm#aa@aa.com.sg"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeigjk3q6zxiuqwhb573ogx53qpiezghvuxqpre5qhxeyesbx4xblxm#user@example.org"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeiguqbgw5rxaz7hgdbkz2ndftlb7ktzydfkqte7xsvil7bytu233ei"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeiha2ydlkihhrbivrbvylr7myfo26fgjo63mzpsfsyot5glhqb2uza"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeihaifdog5rcrok62gxqx2gsgaf77e5rnigkozur7ray6d4yr53tge"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeihm566ce2hlr65n7bdmgdh3wfj7ikw2vvnwv3gehbtyqq22xwtrqy"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmap7f2zzcedqqbhxtm1ymah3jakkpdqyhbdfoteu938sf/#webmaster@cuni.cz"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmbmtbqxzyvafhcgrj47q16z9umhxgcoriz7jwwuck9gwa/"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmbtirqa8ezbj2rhbjd7bg8ncingx4hjcurnmul6dapx5a/#"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmcuhgyqoswz2utjswxwclrielscuyypppthpj2pytr8rl/"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmejokdqrqrzhbmrxfz6ow3zochj97duyzeb597rvzbkf5/#user@domain.tld"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmejokdqrqrzhbmrxfz6ow3zochj97duyzeb597rvzbkf5/#webmaster@cuni.cz"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmf46gdvnjptabpw7sdhzvtbkjypjk2hfb1gqd8htdja4i/english.html"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmnupxxp2cormsngrdgtjtxft4bzvdej39r69sw3lt1xye/"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmphdvxyukgsntwjmau28lhzjk4n9xgxy4e4c6frccxa4f/"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmqkhucs6c6umbqqsijmtkvq11rxw9mzxkx7qqygzw9sk9"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmr21gy1xba326lnnyryzhinq3bhznrubeezyyz9bs1dts/#user@example.org"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmr58yhjuenx3yjskhfyyaufulitkcqi9eqma8jksvryv8/jeff3.html"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmslqbrttddxelfst3nnhu2txkjxlxqtncgy12wduu3e5t?filename=ionosmail.html/#redacted@abuse.ionos.com"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmtapuagqwj3zb2fauy6szuldq2dtswgidl8veuvoe3vqe/"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmwqjnykp2odee27lzeezjkcgqqkwn7uwz3qej1dyyjhsj/slim.html"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmz5sbvvmwzjbvcgym4qdbh1slalfgakuztx6olwcnjimm/"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmzdls4mrf8dasj7ep3ls22apjakyawcegknl3r3z54vuf/#william@nabaza.com"; http_uri; nocase; content:"ipfs.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafkreig2aybo4jtclqvvkib2va2qors62vzb6fuhtm4a7a4oype643tr4i?filename=lets-make-moneywellgo.html&websrc=vfjemslfv1furfkv6y2qzkoyyspvq18cqgbm2dd0kt86eohc8xkvbcgpytc167nxpwecb8ofwuglhkionswmoowojubvuo991bjf5n50dxsfysxrqibnwfnvoakqusoebday6ewhvf8dj7atqynedbuvn8epemk86ejbj3eawmwerdgzikq6nxeltjgzgjp2l0ywvzpvblisa43uskzxjgeobrf9g57seed1hptinpgumklndspjcy4oery80zxxx3d3fohe1mniclljqksae2h3px1bkv8jslwjvpxxfzcvce&dispatch=447&id=161592"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeia5fn2zdi4ts2h3onvqvl5low53pb5qoaieekcm4zhr326lnq67cm/oldport.html"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeiaxqrns5abixpv325r3qooxuzsaz7wev6misfhby7zzp76ord6jy4/oldsbroad.html"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeib2ju2xanppj7pxlcct2yzhoptrtucr27kx74q3hybvomvywpz77i/bilidonemo.html#noc@cloudflare.com"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeib7mveiecav6dy2yjrnxzmx2p34nlkwu62tjwqhb6q2nqjm4itrgi/nobding.html#william@nabaza.com"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeibgiwlpx43o22cehf37byfa3izpi3qrfvgoqjjx5uqgvovqb3smzi/bilfrnd.html"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeibonsnfurfqwotuxhyuw75ugxb2qiwgrm6vn2u6atrgz53phik67q/oldsbransin.html"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeibutkxftzpmyqgahrvekirqlqvcdnwkdfcmyfteyehvvgkwvlcfcm/sasid.html"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeic6gmuczbadublh7p2dx4ly5ideppqo7h6grv6lbgubkcjztz7fua/cp2.html"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeidc6rub5xgly53xgumjnoouxhrsd2t3ea7oj6dqjdh2a5critpj5i?filename=index.html.html"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeiegevcir55b33o5kvfefibnz2253ymgprwixxq2d2bpnsm7hy425e"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeig56kfb7kwmbrq3pjimj4lpc3rgt6pnrnk2nl3nejnlpnrscwk3ie"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeigtq36c2h6fb34kukxp5zoem63j2b2srmyhhdsg53pnf6j5oufbk4/mashi.html"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeihaei5mdapgdve7ipxpzxlrwgfyv4g2npgcwkc2bkvabzz3rkiqge"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmafcikdh3kr95uaka8x69lxrnsbet96hy9gjxlcfioqrb/"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmbqipclpudssssmpqzxnxhcs6lrxasn5ncpazsbv5d6dg/?filename=index.html"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmbsfh2vkhuchbpelkcr6cnejzsnrgwamur7uvcru32rcv"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmcqccs9arfptik4cbnll2ywywszewkgotigrmdlbfdzme?filename=index.html"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmd8qjcbuur5dcxi1qwhuhuqosja2gdosbz3femjgt4ggs?filename=dndex.html"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmdtspx7aurcwh5rdmxsfnyfihyahsefvz74jkdhetyznz?filename=onedriveellllllllvip2.html"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qme8mqzjq5tkcj5wjs1jej5r2uh87whyngcdzwj3bznpjr"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qme9t5mdgwtjybdj5zhg43dkbxy5h1b9b9bhix1x1adukv/"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmebhkt36w3jfrll2k4jevvpvsniym5nessgtvjuaqjxje?key=bf38df4466e9cb6870142585341d7c28c4be5cba&url_01=https://asserta-honeyedly-toom.s3.us-west-004.backblazeb2.com/index.html&url_02=https://climacium-opuntiales-retar.s3.eu-central-003.backblazeb2.com/index.html&url_03=https://equalled-hylodes-penmanship.s3.eu-central-003.backblazeb2.com/index.html&url_04=https://keepsaky-samiri-subcyanide.s3.eu-central-003.backblazeb2.com/index.html&url_05=https://eccyesis-euge-splatterfaced.s3.eu-central-003.backblazeb2.com/index.html&redirect=https://www.amazon.com"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmeblracw3dtpxmrv5uqkds5roe1lvhbdebk9njfpfvgku#schier@utia.cas.cz"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmegdjdd6evbb511nvkgrsk7w5bjbrsbobdq6wjaesmry4?filename=netabelll.html"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmejzymkpbsybbuv9dlt8aukbczh5ug7tktdthrmr91xq5?filename=hhhhhhdhdhdhdhdh++hhhhhhhd++hdhdhdhdhd+++dhdhdhdhdhdhd+++dhdhdhdhdhd.html&amp%3berr=tpg6kyyspzowf2pgbuk&amp%3bdispatch=cac&amp%3bid=0c9545bbb9cc22a4b40c94c8c076b7&err=qtxzzmyso1hrndryxin&dispatch=baa&id=cb26c0937a075a3891b6b3b0c38c05"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmejzymkpbsybbuv9dlt8aukbczh5ug7tktdthrmr91xq5?filename=hhhhhhdhdhdhdhdh++hhhhhhhd++hdhdhdhdhd+++dhdhdhdhdhdhd+++dhdhdhdhdhd.html&amp\;err=tpg6kyyspzowf2pgbuk&amp\;dispatch=cac&amp\;id=0c9545bbb9cc22a4b40c94c8c076b7#"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmes6zzxvzdlieaxbmkbjshdzjniju9zmr61wccrgy86kk"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmnlmwndrdxhp61ro6sk9btpg5rh2zyvvsgr7z6d78qcsy?filename=index.html&websrc=hzp8cd2kdnap4xaqn56uiiwguwziystpchr5a6pt1azhdqm2kt0g02k9fgjgkazmoac2sn1rsexpkf6svhyix1utlyw7tuauau1hbn3f4dcwoknuojyauovi1w0etp6yooqufuaautlkawujgszcvsof2x91xzgugkjrmlsp9mz8xvaz7w9xjyfannp6scl8c3envquq7ui1qroobpkilicxadiyhve9nxvd2xub0njnllttxphd6go2drgz0gezwcxiydrl64zbzvc471fqz25dis0hqfhan6vdevdjcb0ogb&dispatch=885&id=635890"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmpfr21tv9h93b1gsvrqlmtmnntt1xcpm4tdqbmq9njtmp"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmpofme9f5ge7gxuwnwla5pmjwigthw1ouygf8j8hd3o6q"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmpw4wwsqajn7vjkzu8gvritokpp8zjjmqz2n7csqbvomc"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmpxqxwq9y3ce5oe8egkhc7m6jdqzawwzxbeqxoh6dtc5x"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmq1v6otrrzu6kvcjqhscucogqqntxfwyakfu9adr1uwdk?filename=login.htm?en#noc@protocol.ai"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmqceguknef6r4qteewswawkwrtdemdp8vcqk7f6epq1es?filename=index.html"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmqxsayw7wwrxka1ttgt2i9awxirupgfin21svf5aimzeu"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmr3cungxbth8wvbcpwhzx2dvaygl1hbvfwhe5uckipdrs"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmsger7ivyckhu5qluhw4726i5bwrichzzhh83wocxyb65?filename=ssyes%2520ddhdh%2520shshdd%2520dhhddnhs%2520fgjkt.html"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmsmqonkbkuuttdsyrxsykbqx4q9uhggmcxj2q5ujbwhfz?filename=pdf_frnkadi2.html"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmsueu53jgabhjnmmxw3judygvnwx5dgfqxjxbcisjwug5/"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmtb7yz1frxtc447wneybmadx4fpmpa3dkhr9mjue4ktex"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmtuy4pc1dyqdtgc8prpg5nleksqvkw78qcndadicmf3xr"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmu2psb8vcvcepvlsgi8mpzf43xjhneiefarmvjkptafpj"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmvi7pinuclquuzyn3cnchfvkdpe8med9zmqg3n6sc7pdu"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmvzommzxpatyuyj9vinhyqvhedsq2i3dqcxhygenfahhn"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmxdgbn1amjcrbkinayk184nn4vehxraffd7xxioncvbag?filename=index.html#test@eaglestar.com.my"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmxhdq9hmspjcmssac4hyxtcyer31bp2fzbxztgktvb9kq"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmxhrugzfvklkacbxnjx9kkgcp4lbnlefowehorblqanwr/"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmxmqnpks4rmk6hdnllphwhfag5w9cxfcf6a3az5ra1vog?filename=will.shtml"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmxsetpy2bjd1syqqowxazpeyu3sb3u89hmrmevahxr1k4/"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmxsfvscaf8imnv6bjq1jn8mi8scfi29rpjxm8rvdzkjpe"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmxsfvscaf8imnv6bjq1jn8mi8scfi29rpjxm8rvdzkjpe?filename=index.html"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmxwt78d8cpkavsx24pl5f89fcxukfvohqezc5hw8jylw9"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmyppbmkrdknwzf38yreeffldnfh2xt83rbcdvutvrxnjb"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmywlm9nzyeybf2zn6afwsjb2kodobkpfy6b5uiaaalghh"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmz5i8xjlai36lqdo2ew8i9tkehwncobbsgfmpdpe6vc9b"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmza2tpod5phznroqicquhc9kfbck95b7cywgh3gygxhuw?filename=files.html"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmzpyfbe7zxt7czzx8q4rbv3mm6msguaczwktwbbzsbgv3"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmzqtied2qrfplvkecgt9rgvtdeyiriw2lwusljdaz7otr/"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmzv4vb9cozjim7rqniu3lfb4dj7u6x3thuvu8uwq6dy8o?filename=index.shtml"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipns/k51qzi5uqu5dicnr7s3ee6oe3sapwumtlnsk5mb1uccrob0maz81c92stlnygg"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipns/k51qzi5uqu5din9rmvlyf6fpbkva0mzbv9ud07vnn7gyuy25bvfrkdkwgnj1k4"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200069259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4yxy1c"; http_uri; nocase; content:"is.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200069260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bloccadispositivo"; http_uri; nocase; content:"is.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200069261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bper_alert01"; http_uri; nocase; content:"is.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200069262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bper_banca"; http_uri; nocase; content:"is.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200069263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/infobper"; http_uri; nocase; content:"is.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200069264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/revisione_anomalia_dispositivo"; http_uri; nocase; content:"is.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200069265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ripristinodispositivo_"; http_uri; nocase; content:"is.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200069266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/skjy5j"; http_uri; nocase; content:"is.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200069267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/spedizionesicurabper"; http_uri; nocase; content:"is.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200069268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/carta.php"; http_uri; nocase; content:"italywinemarket.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/otp.php"; http_uri; nocase; content:"italywinemarket.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/service/"; http_uri; nocase; content:"jalarammultiprint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/personal/johan_jent_se/_layouts/15/doc.aspx?sourcedoc=%7beec8258f-a831-42dd-be37-a7186f3b17ee%7d&action=default&slrid=46cb5da0-f097-4000-fa3f-ad6d18add717&originalpath=ahr0chm6ly9qyw5zc29uzw50cmvwcmvuywrhyi1tes5zagfyzxbvaw50lmnvbs86bzovzy9wzxjzb25hbc9qb2hhbl9qzw50x3nll0vvogx5tzr4cu4xq3zqzw5hrzg3ri00qkzlswlowfbjwfp2c0xncgiydfnpz3c_cnrpbwu9b1dcnljfmkuya2c&cid=5712c764-51dd-4b60-bae5-9412676adf48"; http_uri; nocase; content:"janssonentreprenadab-my.sharepoint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/:w:/g/personal/dhankins_jecompanies_com/ezmchome9sxbl4kht3dj7mgbxdck6dbig800tfkd1szbja?e=dafgln"; http_uri; nocase; content:"jecompany-my.sharepoint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dost/"; http_uri; nocase; content:"jefigscredit.co.ke"; content:"Host"; http_header; classtype:attempted-recon; sid:200069274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/code-eu1.jivosite.com/widget/jqqceif7de"; http_uri; nocase; content:"jivo.chat"; content:"Host"; http_header; classtype:attempted-recon; sid:200069275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/flensburghockey/offers-flensburghockey.html?=idimmdhpkvn/cartid=rbemkh4p/from0k72d2x"; http_uri; nocase; content:"johanneum-hamburg.s3.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/flensburghockey/offers-flensburghockey.html?=idyxmbq17pe/cartid=lwdetoxj/fromzlfk0qf"; http_uri; nocase; content:"johanneum-hamburg.s3.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/first"; http_uri; nocase; content:"jreast.co.jp.waizao.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200069278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7euow"; http_uri; nocase; content:"jtbtigers.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-content/sa/"; http_uri; nocase; content:"kalajaat.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/contact-us/2970503358622564"; http_uri; nocase; content:"keap.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/adobe/"; http_uri; nocase; content:"kiandainvest.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bt_internet"; http_uri; nocase; content:"koji.to"; content:"Host"; http_header; classtype:attempted-recon; sid:200069283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bt_service_alert."; http_uri; nocase; content:"koji.to"; content:"Host"; http_header; classtype:attempted-recon; sid:200069284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bt_teem"; http_uri; nocase; content:"koji.to"; content:"Host"; http_header; classtype:attempted-recon; sid:200069285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4668bd15371dee754cc64ac461f2c7f6/d01a8d60b7aaf39c7fb5c0b3012a739f.aspx"; http_uri; nocase; content:"kolobjut.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?pandora&amp\;sa=d&amp\;source=editors&amp\;ust=1665198239858988&amp\;usg=aovvaw1-rch8iocyyq4lfpneqymr"; http_uri; nocase; content:"kolobjut.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/.tmb/cose//correos/?clp=327598322"; http_uri; nocase; content:"krizia.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200069288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/.tmb/cose//correos/seleccione_medio_de_pago.php"; http_uri; nocase; content:"krizia.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200069289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/l3leph"; http_uri; nocase; content:"kutt.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200069290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/l?u=https://abre.ai/eduz?userid=nwwuer4j"; http_uri; nocase; content:"l.wl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/l?u=https://abre.ai/een1?userid=gkywgnp7"; http_uri; nocase; content:"l.wl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/l?u=https://abre.ai/egic?userid=urrtk9bo"; http_uri; nocase; content:"l.wl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/l?u=https://abre.ai/ei3z?userid=nl7mbjhz"; http_uri; nocase; content:"l.wl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/l?u=https://bit.ly/3mlmufl?trackingid=asgfti6f&signature=newsletter"; http_uri; nocase; content:"l.wl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/l?u=https://gorkha-uae.com/hrrmxpmk?dt=1"; http_uri; nocase; content:"l.wl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/l?u=https://s.id/12ezw?userid=g8tmk6cv"; http_uri; nocase; content:"l.wl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/l?u=https://s.id/12ezw?userid=iwhzddbk"; http_uri; nocase; content:"l.wl.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a0n"; http_uri; nocase; content:"l24.im"; content:"Host"; http_header; classtype:attempted-recon; sid:200069299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/login.html"; http_uri; nocase; content:"lbank.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200069300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/627d1ee47d4cb80020d558aa"; http_uri; nocase; content:"ldp.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200069301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/62985118879fa500156595cf"; http_uri; nocase; content:"ldp.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200069302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/62c7ec614204ed002c0799f2"; http_uri; nocase; content:"ldp.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200069303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2022/09/sim2.html"; http_uri; nocase; content:"leroudemaroranaa.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/match_login/match.com/match/login1876.html"; http_uri; nocase; content:"lifeiswhatyoumakeofit.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/coinbaseapp"; http_uri; nocase; content:"lift.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/sw/w_11.js"; http_uri; nocase; content:"lin01.bid"; content:"Host"; http_header; classtype:attempted-recon; sid:200069307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/s/a74a48ad/ghnsf9jjv0_e2miyubuqpq?u=http://www.kntrwyy.radiomanantialesdevidainternacional.com/%23y2fybg9zlmdhcmnpyub0awvycmfhbnrpz3vhlmnvbq=%3d"; http_uri; nocase; content:"link.edgepilot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/40601p5zynl"; http_uri; nocase; content:"linkfly.to"; content:"Host"; http_header; classtype:attempted-recon; sid:200069309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/o/po-statement"; http_uri; nocase; content:"linkin.bi"; content:"Host"; http_header; classtype:attempted-recon; sid:200069310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1rvqqm"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8nyk33"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9onwxq"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/assessoriabvonline"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/atdminhabv"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bvha"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/compassvisatteam?fbclid=iwar1y_woca8bfs4hb6doiqhzlulrfftr9ibsoxqbhrfckwlghzfxe2en2n6c"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cungrationoficial"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fguugio"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/hdyhid"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/hifyiu"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jgbjg"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mssdxd"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/nuinvest"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/nupagamentos21"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/pagamentos.a"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/portalclientebv"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/qk1m4v"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/suportedigital2"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/vv06p6"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/vvolr6"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/w1p0l6"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/woo3x4"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/yahuumail"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/yhooooo"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/yjsao"; http_uri; nocase; content:"linkr.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cupom-americana-site"; http_uri; nocase; content:"linkr.bio:443"; content:"Host"; http_header; classtype:attempted-recon; sid:200069337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/accountupdate12"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/activitlogs"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/adamson12345"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/admin__"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/alcorbeil503"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/alertadminupdate"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/aoladmin_"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/appiesecure2021"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/att.net12"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/att.yahoo.107861"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/att8"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/attmailing"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/attmailuser"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/attnotification"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/attservice67"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/attsupp0rt"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/britishtelecommunciation"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bt.o.world"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bt45y"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bt5644"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/btbroadteam"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/btbroadteam/"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/btcreator"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/btinternet12"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/btinternet21"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/btsecurelink/"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bttlee"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bupporrrt"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/curr0"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/currentl"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dfghjkjhgdfgh"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dhlpackage"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fearnomore"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fwfweflink"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ggbnhb"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ghvfg"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/hendersome"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/hthto204"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/imcreatorboard"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/imcreatorbt"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jfgjg"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jgbjgbjh"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/johnbrownn4811"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/johnbulljohn"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mail1083"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mailmhome"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/makee4"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/marhfx"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mikescrankandchrom"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/millie5566"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/newaccount12"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/optusweb"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/oqk001?dza=21456"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/redirtoken981?dop=991154801"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/sbccglob"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/secubtscjotj"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/status/blocked?username=attservice67"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/status/blocked?username=btsecurelink"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/submisin"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/supportleee"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/updategmxmail"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/verifyyourprotonmailemail"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/webmaioptus"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/xxxx5"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/yahooatt"; http_uri; nocase; content:"linktr.ee"; content:"Host"; http_header; classtype:attempted-recon; sid:200069402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/personal/hannah-daly_live_nmit_ac_nz/_layouts/15/wopiframe.aspx?guestaccesstoken=ia5uzzon3iviku4f3pxemyhhabfwkpdjirpftfear%2fk%3d&docid=1_169208e425ed84fea9fd294a6886d67e9&wdformid=%7b06255f86%2d4bf9%2d4ee8%2dbd7e%2dfef81913a79b%7d&action=formsubmit"; http_uri; nocase; content:"livenmitac-my.sharepoint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/personal/hannah-daly_live_nmit_ac_nz/_layouts/15/wopiframe.aspx?guestaccesstoken=ia5uzzon3iviku4f3pxemyhhabfwkpdjirpftfear/k=&amp\;docid=1_169208e425ed84fea9fd294a6886d67e9&amp\;wdformid={06255f86-4bf9-4ee8-bd7e-fef81913a79b}&amp\;action=formsubmit"; http_uri; nocase; content:"livenmitac-my.sharepoint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dl/fcb60c4d0/7bqctung-aecvr9wm-ee4nkkf9-fmpzeakf"; http_uri; nocase; content:"ln5.sync.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d-3hbjpx"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d2cagqdm"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d_kqpmtx"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/db5fhxav"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ddgw4gzt"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dfxw4_sm=ojdszb15xdzzzv"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dhaqi_sy"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/di6hueus"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/di_qntwp"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/difsmpfx"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dkng9_k3"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dr4agxum"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/drgcsgzw"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/drsgmgjm"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/drxkr5pj"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dt8k7nyp"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dvmqs3eb"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dzatxt_g"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e2p8spez"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e2stmj2s?=mtqeaywlyj1co3"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e3fd6aks"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e3g9qxhs"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e5gzdpqa"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e9crqj-p"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e_idwusk"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/eacne62b"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/easrgdqg"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ecymrzgu"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/edvvp6ax"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ee5yc9ca"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/eefrfkzq?=ojiouwexpg8h5s"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/egbbkcqr"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/egtmhpmv"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ehk85dzy"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/emmrycxb"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/eqe_7fzg"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/eqexis8b?=779auzfcptp61w"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/esh6x-2g"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/esjzqf_8"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/et-dkcdj"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/eu3tad-d"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/euhr7uki"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/evbzscwd"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/evdj-yqh"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/evjgv5bv?=eme9jh5wippejx"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ewfyckzm"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ews7fgtw"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/exc7h6tz"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ez2wd7tg"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ezct3vyh?gzqrvu"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/g-pbvksh?id=613229"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/g-qa5zeq"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/g45cgcft"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/g6y3fhkt"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/g6zr9nw9?=4uqkilhbggblgr"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/gat_yr4c"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/gbs4ecw8"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/gkdcpu2w"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/gm3fgtxt?=nxfyjvy10exdkuo"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/gm9mx7ii"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/grcucqwh"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/grqsxcxg?id=732115"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/grxqxr5n"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/gtqqwvzn"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/gvc3hmpq"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/gxsukn_z?=hmawyn6k"; http_uri; nocase; content:"lnkd.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/actueel06"; http_uri; nocase; content:"lnkiy.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200069472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/gala-games/?userid=2&amp\;uri=xekd3rplzpbvpnurjplbuad4vkvmejlrhvbgqvs5koe="; http_uri; nocase; content:"login-galagames-account.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/gala-games/?userid=2&uri=sihiuw+ggvspd3z8ysde2bvktsznbbwom46ojbk6oxu="; http_uri; nocase; content:"login-galagames-account.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/de/?code=1a468e385b9475ae1d0bfa645841a01f"; http_uri; nocase; content:"login-live.com-s02.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200069475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/aol-rd246/"; http_uri; nocase; content:"login.aol.storage.googleapis.com.slmbc.lk"; content:"Host"; http_header; classtype:attempted-recon; sid:200069476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ppt9"; http_uri; nocase; content:"lp.vp4.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ckpp_7227_1_es_lat_yp/"; http_uri; nocase; content:"lps.top-party-pet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dqrxai"; http_uri; nocase; content:"lt27.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200069479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jal0cm"; http_uri; nocase; content:"lt27.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200069480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jnrv8a"; http_uri; nocase; content:"lt27.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200069481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/malfqj"; http_uri; nocase; content:"lt27.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200069482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/qz2ci3"; http_uri; nocase; content:"lt27.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200069483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/zzmtdp"; http_uri; nocase; content:"lt27.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200069484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/claimskinn"; http_uri; nocase; content:"lynk.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/layananfacebook"; http_uri; nocase; content:"lynk.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/stimulusbenefit9090"; http_uri; nocase; content:"m.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http%3a%2f%2foasysfactory.com/wp-content/upgrade/api.html"; http_uri; nocase; content:"m.vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http%3a%2f%2foasysfactory.com/wp-includes/css/api.html"; http_uri; nocase; content:"m.vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http%3a%2f%2foasysfactory.com/wp-includes/widgets/apijancok.html"; http_uri; nocase; content:"m.vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https%3a%2f%2fahadconsultancy.com/wp-content/themes/api.php"; http_uri; nocase; content:"m.vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https%3a%2f%2fegyptvespa.com/images/api.html"; http_uri; nocase; content:"m.vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https%3a%2f%2fhimalayansaltlife.com/wp-admin/js/api.html"; http_uri; nocase; content:"m.vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https%3a%2f%2frestoia.com/wp-admin/css/api.html"; http_uri; nocase; content:"m.vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https%3a%2f%2fzangava.com/wp-content/uploads/api.html"; http_uri; nocase; content:"m.vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2021/02/blog-post.html"; http_uri; nocase; content:"magyarpoosta.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/databases.html?home=user@example.org"; http_uri; nocase; content:"mailsrver.contributes.rest"; content:"Host"; http_header; classtype:attempted-recon; sid:200069497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/tr/t/s922tlfl8pw4oug/3/https://w3s.link/ipfs/bafybeigw5jlwvykqqwfwiz7bykja2imjyes2ouyl57dd33vpydeip4efgy/30093a.shtml"; http_uri; nocase; content:"mailstat.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200069498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/track/click/30841566/ljjz0pzy1w.trailmagic.org.?p=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"; http_uri; nocase; content:"mandrillapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/svkkwys/juyyt.app/google.com"; http_uri; nocase; content:"marlor.quest"; content:"Host"; http_header; classtype:attempted-recon; sid:200069500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/svcx/index1.php"; http_uri; nocase; content:"mawakimkuiguithaniainvestment.co.ke"; content:"Host"; http_header; classtype:attempted-recon; sid:200069501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/lnk.asp"; http_uri; nocase; content:"mb102.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/certificate-checker?login=false&amp\;originalurl=https%3a%2f%2fbit.ly.mcas.ms%2f3oynzgj%3fmcastsid%3d20893&amp\;mcascsrf=93b468fdf3284ff3f2c8f22a8a87cba95517d378569921d184b2090fc8102d80"; http_uri; nocase; content:"mcas-proxyweb.mcas.ms"; content:"Host"; http_header; classtype:attempted-recon; sid:200069503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/certificate-checker?login=false&amp\;originalurl=https%3a%2f%2fbit.ly.mcas.ms%2f3tbqbin%3fmcastsid%3d20893&amp\;mcascsrf=0f95c59a30af1e3a152874bd1ed8389e360301a106dd1613f05a98f6033f0361"; http_uri; nocase; content:"mcas-proxyweb.mcas.ms"; content:"Host"; http_header; classtype:attempted-recon; sid:200069504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/w4pj6?/confirm-here"; http_uri; nocase; content:"me2.kr"; content:"Host"; http_header; classtype:attempted-recon; sid:200069505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/swi/"; http_uri; nocase; content:"mersinyenerticaret.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/aus/6f40af2a-bd43-4f5f-b217-f5448356ea1e/68d853dd-2625-4e50-9ca1-ceb4c963520c/863cc991-0254-4fa5-aa96-dd37702859ba/login?id=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"; http_uri; nocase; content:"mesharepoint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?bfp"; http_uri; nocase; content:"mexcrypt.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/pemenanghadiah2022"; http_uri; nocase; content:"mez.ink"; content:"Host"; http_header; classtype:attempted-recon; sid:200069509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/de/pb/login/"; http_uri; nocase; content:"mg-twt.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/p/cp/0ccc3066dc2bcd17/c?mi_u=87923176&mi_origin=&url=http://email.stickercanada.com/t?entity_type=2&entity_id=32534&email_pref_id=34785928&sent_id=1600423397&service_id=22668&redirect_url=https:/relievehotmailonly.cloudns.cl/imagineme/ionos.php"; http_uri; nocase; content:"mi.jetblue.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ovc/exciting-dhawan-plesk.page.html#abuse@optusnet.com.au"; http_uri; nocase; content:"mixbrasil.org.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200069512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?m=1"; http_uri; nocase; content:"mkcolombiatry.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/verify/americafirst.com/"; http_uri; nocase; content:"monicamattison.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/netfilxwebsupportteamsubscriptionpayments/account/login.php"; http_uri; nocase; content:"motraco.co.mz"; content:"Host"; http_header; classtype:attempted-recon; sid:200069515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bigpay1/winshopee"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/609890b8001f18095ac075fc"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/60deff002ca34f5aa4985ab3"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/6112452ca3f6e60d511bad0d"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/61e2d74ad42da26ef87a2c10"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/61e82b96ed8dd6152815c487#"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/61fbd0ed6ab665110baf7c8d"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/6216d491976b950bb612ee29"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/6217e24f976b950bb6148afa"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/622ef84817a64c6cae942da3"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/622f257117a64c6cae9476f7"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/62528753e911ef58a52499d4"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/628e2c9dbd94a175bb6fe784"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/6291f287bd94a175bb75e94d"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/629b6312bd94a175bb849970"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/629c42c3bd94a175bb859032"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/629e7974bd94a175bb89ffeb"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/62a096d7bd94a175bb8dc8ec"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/62a44bd3bd94a175bb93ccfe"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/62aab8d4bd94a175bb9d8b2d"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/62ab0092bd94a175bb9df796"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/62b0210bbd94a175bba422d0"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/62b21abebd94a175bba7ec1b"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/62baae34bd94a175bbb57e50"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/62bafb7fbd94a175bbb5e6e7"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/62cbdb01971e3e097d357811"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/62dbab88971e3e097d4f6e0f"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/630e0e70c2748c14c10ef710"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/63553bfee5740e14f419de36"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/636c4690e5740e14f44177f7"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/636dca0de5740e14f443e9f5"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/6374f56db200f15a82b4045b"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jenetwood/untitled-form-1"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/layananpihakfacebook/resmipemblokiranfacebook"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/rayzmania1/capitecbankdebitcheckmandate"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/tntexpressonline/forme-sans-titre-2-1"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/verificationpaypal/acceptezvosfonds-1"; http_uri; nocase; content:"my.forms.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200069552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/epy7xq3y-office-365"; http_uri; nocase; content:"my.visme.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/uwbrvz8quj/page1.php"; http_uri; nocase; content:"myjaocseooeb.myjaocseeseb.uqmzwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/uwbrvz8quj/page1.php"; http_uri; nocase; content:"myjceaesecroab.ccoaa.pkvtcu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/uwbrvz8quj/page1.php"; http_uri; nocase; content:"myjceaseroab.cco.fnfkau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/uwbrvz8quj/page1.php"; http_uri; nocase; content:"myjsacesecob.oaa.ranzlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/uwbrvz8quj/page1.php"; http_uri; nocase; content:"myjseacarsaeecob.oao.pkvtcu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2hhwdm"; http_uri; nocase; content:"nah.uy"; content:"Host"; http_header; classtype:attempted-recon; sid:200069559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6kxp6p"; http_uri; nocase; content:"nah.uy"; content:"Host"; http_header; classtype:attempted-recon; sid:200069560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/hxnuzx"; http_uri; nocase; content:"nah.uy"; content:"Host"; http_header; classtype:attempted-recon; sid:200069561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k4jcff"; http_uri; nocase; content:"nah.uy"; content:"Host"; http_header; classtype:attempted-recon; sid:200069562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/l4khtv"; http_uri; nocase; content:"nah.uy"; content:"Host"; http_header; classtype:attempted-recon; sid:200069563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/pogdut"; http_uri; nocase; content:"nah.uy"; content:"Host"; http_header; classtype:attempted-recon; sid:200069564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/q3euu4"; http_uri; nocase; content:"nah.uy"; content:"Host"; http_header; classtype:attempted-recon; sid:200069565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/qzadbp"; http_uri; nocase; content:"nah.uy"; content:"Host"; http_header; classtype:attempted-recon; sid:200069566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/tutp27"; http_uri; nocase; content:"nah.uy"; content:"Host"; http_header; classtype:attempted-recon; sid:200069567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/vwzsnu"; http_uri; nocase; content:"nah.uy"; content:"Host"; http_header; classtype:attempted-recon; sid:200069568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forceboot334244/"; http_uri; nocase; content:"natohqint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/eib_ib_s9/loginpage.hu.html"; http_uri; nocase; content:"netbank.takarekbank.hu"; content:"Host"; http_header; classtype:attempted-recon; sid:200069570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/:x:/r/personal/ginger_gingerfountain_com/_layouts/15/wopiframe.aspx?guestaccesstoken=gpys8ex7ys1urrzbfeasvlexkodtrovmmcpn%2brsnebs%3d&amp\;docid=1_1882b07b5eb5643d2bdaa63426324ef0e&amp\;wdformid=%7b9bd54af1%2dee16%2d4e07%2d8d62%2d6e9b76e47512%7d&amp\;action=formsubmit&amp\;cid=9adf3e74-8cc1-4e36-b545-c9165fcafde7"; http_uri; nocase; content:"netorg6600800-my.sharepoint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/eml"; http_uri; nocase; content:"netvision-it.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/eml/"; http_uri; nocase; content:"netvision-it.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?id=7"; http_uri; nocase; content:"newsletterby.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-admin/images/data/redred.html"; http_uri; nocase; content:"nihadtrading.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp"; http_uri; nocase; content:"nmbzgu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/uae-post.com.ae/new%20dhl/torsion/index.php"; http_uri; nocase; content:"nuriero.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200069577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/n/frdtal0a81zt/b/2347839829490docs49330/o/microsoftonline.htm"; http_uri; nocase; content:"objectstorage.eu-frankfurt-1.oraclecloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/n/frdtal0a81zt/b/25363723wetransfer374833/o/login.microsoftonline.htm"; http_uri; nocase; content:"objectstorage.eu-frankfurt-1.oraclecloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/n/frdtal0a81zt/b/255362676428online98893/o/login.microsoftonline.com"; http_uri; nocase; content:"objectstorage.eu-frankfurt-1.oraclecloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/n/frdtal0a81zt/b/26367738384838sharepoint88983939/o/login.microsoftonline.com"; http_uri; nocase; content:"objectstorage.eu-frankfurt-1.oraclecloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/n/frdtal0a81zt/b/2646738483949file493030/o/login.microsoftonline.htm"; http_uri; nocase; content:"objectstorage.eu-frankfurt-1.oraclecloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/n/frdtal0a81zt/b/266463848doc4783939/o/microsoftonline.htm"; http_uri; nocase; content:"objectstorage.eu-frankfurt-1.oraclecloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/n/frdtal0a81zt/b/27747384933st458833/o/microsoftonline.htm"; http_uri; nocase; content:"objectstorage.eu-frankfurt-1.oraclecloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/n/frdtal0a81zt/b/3456634455fy45678/o/microsoftonline.htm"; http_uri; nocase; content:"objectstorage.eu-frankfurt-1.oraclecloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/n/frdtal0a81zt/b/36467383949sharedoc/o/microsoftonline.com"; http_uri; nocase; content:"objectstorage.eu-frankfurt-1.oraclecloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/n/frdtal0a81zt/b/3668284882934voiceplay/o/login.microsoftonline.com"; http_uri; nocase; content:"objectstorage.eu-frankfurt-1.oraclecloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/n/frdtal0a81zt/b/367489493903puz35647389302/o/microsoftonline.htm"; http_uri; nocase; content:"objectstorage.eu-frankfurt-1.oraclecloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/n/frdtal0a81zt/b/36949499439st565738/o/microsoftonline.htm"; http_uri; nocase; content:"objectstorage.eu-frankfurt-1.oraclecloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/n/frdtal0a81zt/b/3884578384wetf844/o/login.microsoftonline.htm"; http_uri; nocase; content:"objectstorage.eu-frankfurt-1.oraclecloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/n/frdtal0a81zt/b/46637882949sl47839/o/microsoftonline.htm"; http_uri; nocase; content:"objectstorage.eu-frankfurt-1.oraclecloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/n/frdtal0a81zt/b/887897899sharefile/o/microsoftonline.htm"; http_uri; nocase; content:"objectstorage.eu-frankfurt-1.oraclecloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/n/frdtal0a81zt/b/899394892933/o/login.microsoftonline.com"; http_uri; nocase; content:"objectstorage.eu-frankfurt-1.oraclecloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/n/frdtal0a81zt/b/bucket-20220614-1751/o/microsoftonline.htm"; http_uri; nocase; content:"objectstorage.eu-frankfurt-1.oraclecloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/n/idd0srcdkee8/b/pdf00/o/365.html"; http_uri; nocase; content:"objectstorage.us-ashburn-1.oraclecloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/n/iddgtgli4may/b/bucket-20221004-1639/o/indexs%20(8).html"; http_uri; nocase; content:"objectstorage.us-ashburn-1.oraclecloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/n/axjfaaaxjixb/b/3553473994403248wt344/o/login.microsoftonline.htm"; http_uri; nocase; content:"objectstorage.us-phoenix-1.oraclecloud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/connexionconorancli"; http_uri; nocase; content:"ohmy.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200069598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?m=0"; http_uri; nocase; content:"oiazeiuiazolme.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/express-worldeurope/tracking-international/login/"; http_uri; nocase; content:"oncaveat.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/download?cid=0f01a8b5a87f066a&amp\;resid=f01a8b5a87f066a%211104&amp\;authkey=akbmz9yrfzyrja4"; http_uri; nocase; content:"onedrive.live.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/download?cid=936f66742226eaf0&resid=936f66742226eaf0%21105&authkey=aitnwnmvuumu2oo"; http_uri; nocase; content:"onedrive.live.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view.aspx?resid=cd71337cfb2b3ba9!1313&amp\;ithint=onenote&amp\;wdo=2&amp\;authkey=!ajwhinbbsa8ui98"; http_uri; nocase; content:"onedrive.live.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a7zxb1g"; http_uri; nocase; content:"onl.bz"; content:"Host"; http_header; classtype:attempted-recon; sid:200069604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/hydh4kr"; http_uri; nocase; content:"onl.bz"; content:"Host"; http_header; classtype:attempted-recon; sid:200069605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wm2dp2c"; http_uri; nocase; content:"onl.bz"; content:"Host"; http_header; classtype:attempted-recon; sid:200069606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/zts7m1t"; http_uri; nocase; content:"onl.la"; content:"Host"; http_header; classtype:attempted-recon; sid:200069607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?m=0"; http_uri; nocase; content:"online-helpchase.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/app/forms/view/zalxyved/a9adea36-d163-4d46-a3de-0e990d86e78e"; http_uri; nocase; content:"online.visual-paradigm.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ions/index.php?email=redacted@abuse.ionos.com"; http_uri; nocase; content:"onlinecasinospark.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?m=0"; http_uri; nocase; content:"onlinehelpchase.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0f0zx"; http_uri; nocase; content:"outlok.formaloo.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200069612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1682449218/156e09d0ea8e294db3474e54a2df1dc9/download.htm"; http_uri; nocase; content:"padlet-uploads.storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ripleychile/formulario/formulario_opt_out/opt_out?spmailingid=46529866&amp\;spuserid=mtm1mjmzntkxntc5mqs2&amp\;spjobid=mjiwmti5njg1mqs2&amp\;spreportid=mjiwmti5njg1mqs2"; http_uri; nocase; content:"pages03.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200069614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?m=0"; http_uri; nocase; content:"paozeia.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2021/02/blog-post.html"; http_uri; nocase; content:"paypal-inc-userupdatenuber7925570844.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/connect.communication.appsuite/login"; http_uri; nocase; content:"payupdate-xfinitya18bd559c14da1a7b21b292c08c3e3.redirectme.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200069617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/media/fhe6zajxeayqyqm?format=jpg&name=large"; http_uri; nocase; content:"pbs.twimg.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/orn.html"; http_uri; nocase; content:"perspectivart.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/.documents/check-info/adobe%20signed/adobe/"; http_uri; nocase; content:"pflexport.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-admin/includes/api-irs.html"; http_uri; nocase; content:"pichaapp.africa"; content:"Host"; http_header; classtype:attempted-recon; sid:200069621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e/8e140df9"; http_uri; nocase; content:"pincei.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200069622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/index-rouncubc.html"; http_uri; nocase; content:"pip.sfo3.digitaloceanspaces.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/eonpvv"; http_uri; nocase; content:"pixelfy.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-includes/css/webmail2.fidnet.com/index.html"; http_uri; nocase; content:"pkiener.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/.well-known/user/sbb-online-ch/ticket/torsion/"; http_uri; nocase; content:"pleasantonchurchofchrist.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-admin/reviewdocament/index.html"; http_uri; nocase; content:"plumvet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/juegos-ninos/habilidad"; http_uri; nocase; content:"pocoyo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0000/"; http_uri; nocase; content:"porscheoutcast.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/tax-services-clients.ids.gov/start.html"; http_uri; nocase; content:"portal.kastlfel.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fia8mx"; http_uri; nocase; content:"ppt.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200069631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fva4wx"; http_uri; nocase; content:"ppt.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200069632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fvakzx"; http_uri; nocase; content:"ppt.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200069633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fvllvx"; http_uri; nocase; content:"ppt.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200069634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d0uv8808qzu0hxnpoqtl"; http_uri; nocase; content:"preferences.convertkit-mail.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cpsess3669307974/horde/imp/dynamic.php?page=mailbox#"; http_uri; nocase; content:"premium57.web-hosting.com:2096"; content:"Host"; http_header; classtype:attempted-recon; sid:200069636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?m=1"; http_uri; nocase; content:"proceedencryptions.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/emailfwd/show.php?usernum=350311855&amp\;formid=3879"; http_uri; nocase; content:"pub5.bravenet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/index.html"; http_uri; nocase; content:"pupwud.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2rc41txe"; http_uri; nocase; content:"pxlme.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9ll2uaes"; http_uri; nocase; content:"pxlme.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/actueel03"; http_uri; nocase; content:"pxlme.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dtdmbgje"; http_uri; nocase; content:"pxlme.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ewqwwwsl"; http_uri; nocase; content:"pxlme.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/hi1opzhz"; http_uri; nocase; content:"pxlme.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jvgcq__o"; http_uri; nocase; content:"pxlme.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ofcclfoq"; http_uri; nocase; content:"pxlme.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/qbqyilin"; http_uri; nocase; content:"pxlme.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/r6wxsyai"; http_uri; nocase; content:"pxlme.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/stwj0uvm"; http_uri; nocase; content:"pxlme.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ucfuitds"; http_uri; nocase; content:"pxlme.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/uwxh38rr"; http_uri; nocase; content:"pxlme.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/vctcqjvg"; http_uri; nocase; content:"pxlme.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wt7bjibp"; http_uri; nocase; content:"pxlme.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ytmc2hww"; http_uri; nocase; content:"pxlme.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/yvqvuzxe"; http_uri; nocase; content:"pxlme.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/zv8d_zyc"; http_uri; nocase; content:"pxlme.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/zx4tbuve"; http_uri; nocase; content:"pxlme.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cirpz"; http_uri; nocase; content:"qr.paps.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200069659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bczdkg?userid=ad1e2wno"; http_uri; nocase; content:"qrco.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200069660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bd5q48"; http_uri; nocase; content:"qrco.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200069661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bdfevh"; http_uri; nocase; content:"qrco.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200069662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/p/fbvuazl"; http_uri; nocase; content:"qrfy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mce5m16"; http_uri; nocase; content:"qrs.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200069664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jeh2aebbsh97"; http_uri; nocase; content:"quip.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/qv7malu8n7cz/you-have-some-messages-pending"; http_uri; nocase; content:"quip.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?m=0"; http_uri; nocase; content:"qwuyiweuy72376dhgbhsjdb.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/pc/index.php"; http_uri; nocase; content:"rakuten-security-ja.mnkzbu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jpasqz"; http_uri; nocase; content:"rb.gy"; content:"Host"; http_header; classtype:attempted-recon; sid:200069669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ba5ge"; http_uri; nocase; content:"rcl.ink"; content:"Host"; http_header; classtype:attempted-recon; sid:200069670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dwi5d?/pages/services/2022"; http_uri; nocase; content:"rcl.ink"; content:"Host"; http_header; classtype:attempted-recon; sid:200069671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jrrmq"; http_uri; nocase; content:"rcl.ink"; content:"Host"; http_header; classtype:attempted-recon; sid:200069672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/lwlbz"; http_uri; nocase; content:"rcl.ink"; content:"Host"; http_header; classtype:attempted-recon; sid:200069673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mw80e?./help-accountcenter-service.gtempurl"; http_uri; nocase; content:"rcl.ink"; content:"Host"; http_header; classtype:attempted-recon; sid:200069674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/pztsj?./accountcenter-service"; http_uri; nocase; content:"rcl.ink"; content:"Host"; http_header; classtype:attempted-recon; sid:200069675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/roy1j"; http_uri; nocase; content:"rcl.ink"; content:"Host"; http_header; classtype:attempted-recon; sid:200069676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/medical?pc_url=https://health.usnews.com/doctors/li-lei-1012630&securl=ghy1rdnmwlqytqu2rfrhtf27kllqk76w&type=wap&wap_url=https://mail.ionos.com/"; http_uri; nocase; content:"readmodel.m.sogou.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?m=0"; http_uri; nocase; content:"reamaam.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1zlck4g"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200069679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5e0545"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200069680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6c3140"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200069681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/93tanbj"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200069682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ae420a"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200069683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/azwuzwf"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200069684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bca81e"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200069685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fxq6qsv"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200069686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/o48so8y"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200069687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/us598"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200069688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/home.php"; http_uri; nocase; content:"rectifywebwallet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?m=0"; http_uri; nocase; content:"redatofadesafe.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?m=0"; http_uri; nocase; content:"reikreitel.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?gclid=eaiaiqobchmi-sghj969-givwsdmch02wglveaayaiaaeglwa_d_bwe"; http_uri; nocase; content:"reivst-25723.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fiv.htm"; http_uri; nocase; content:"renataassad.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200069693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/77a4fcc0"; http_uri; nocase; content:"replug.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200069694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/webapp"; http_uri; nocase; content:"replug.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200069695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/apps110220542157.html"; http_uri; nocase; content:"rescdoipost.co.vu"; content:"Host"; http_header; classtype:attempted-recon; sid:200069696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mailservice?url=https://ci4.googleuser=%20conte%20nt.com/proxy/qrclxpwgysi1rf2vddyxuf1xk3fdjdd--avtzkbfsw-51gwhfk2qjkj2=%20qpw%203yxkyvveihj_m4yd1wfepj1jyj-fr9ltz3pgqwlzo9hgjtntqw3tmxaujonfw0iyt-a=s0-=%20d-e%201-ft&proxy=yes&key=c7d1173f601f75093c848d58166fbed4"; http_uri; nocase; content:"resize.yandex.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200069697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/28lv5x"; http_uri; nocase; content:"reurl.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200069698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6e9zk5"; http_uri; nocase; content:"reurl.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200069699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/g2emzn?coinbase?shiny"; http_uri; nocase; content:"reurl.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200069700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/m3bxag"; http_uri; nocase; content:"reurl.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200069701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/nomxvl"; http_uri; nocase; content:"reurl.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200069702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/xeknoz?confirmation"; http_uri; nocase; content:"reurl.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200069703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/xgmxr1"; http_uri; nocase; content:"reurl.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200069704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?gclid=eaiaiqobchmiwvwi4dne-givjxpuar1ihatqeaayaiaaeglcz_d_bwe"; http_uri; nocase; content:"rev-sitau-15.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?gclid=eaiaiqobchmi0zev4nne-givgdzich3u4qp1eaayaiaaegk0m_d_bwe"; http_uri; nocase; content:"revista-25823.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?gclid=eaiaiqobchmioqhf-76s-givd0krch0lmqoweaayasaaegkei_d_bwe"; http_uri; nocase; content:"revista-295820.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?gclid=eaiaiqobchmiyz74-r6s-givikfiab2pzqimeaayasaaegj75fd_bwe"; http_uri; nocase; content:"revista-395755.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?gclid=eaiaiqobchmiq9v--umz-givae9iab28pakoeaayasaaegkf4fd_bwe"; http_uri; nocase; content:"revista-985855.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2d0jazx1eky5/click-here-to-verify-your-email"; http_uri; nocase; content:"rezunz.quip.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2021/02/blog-post.html"; http_uri; nocase; content:"riderctposten.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-includes/widgets/ea8a/redirect.php?id=7c18c315d71119489192f48f2b84ad73"; http_uri; nocase; content:"robinettearchitect.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/users/102479819/profile"; http_uri; nocase; content:"roblox.com.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200069713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/users/295793620/profile"; http_uri; nocase; content:"roblox.com.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200069714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/users/326266292/profile"; http_uri; nocase; content:"roblox.com.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200069715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/users/336676242/profile"; http_uri; nocase; content:"roblox.com.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200069716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/users/510650702/profile"; http_uri; nocase; content:"roblox.com.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200069717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/users/564196447/profile"; http_uri; nocase; content:"roblox.com.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200069718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/users/582476417/profile"; http_uri; nocase; content:"roblox.com.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200069719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/users/650168454/profile"; http_uri; nocase; content:"roblox.com.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200069720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/users/670706646/profile"; http_uri; nocase; content:"roblox.com.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200069721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/users/679977937/profile"; http_uri; nocase; content:"roblox.com.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200069722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dpd.php"; http_uri; nocase; content:"rolet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/366xdsz5"; http_uri; nocase; content:"rotf.lol"; content:"Host"; http_header; classtype:attempted-recon; sid:200069724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3nyspk6u"; http_uri; nocase; content:"rotf.lol"; content:"Host"; http_header; classtype:attempted-recon; sid:200069725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4etrhrc7"; http_uri; nocase; content:"rotf.lol"; content:"Host"; http_header; classtype:attempted-recon; sid:200069726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5jkf01"; http_uri; nocase; content:"rotf.lol"; content:"Host"; http_header; classtype:attempted-recon; sid:200069727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/84nd0q"; http_uri; nocase; content:"rotf.lol"; content:"Host"; http_header; classtype:attempted-recon; sid:200069728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mumnc9b4"; http_uri; nocase; content:"rotf.lol"; content:"Host"; http_header; classtype:attempted-recon; sid:200069729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/tmp/ger.htm"; http_uri; nocase; content:"rtibelt.com.ua"; content:"Host"; http_header; classtype:attempted-recon; sid:200069730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/#redacted@abuse.ionos.com"; http_uri; nocase; content:"ruofjtqkvgpqkgdv-dot-netas-c0gi-uladi-ni0ls.ue.r.appspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1c8vn"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1hwks"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1k9a5"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1l5i0"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1n1sp"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1oc6m"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/accedibper_info"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/accessoportalebancabper"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b_p_e_r_web"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bancamps"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bnl-modulo"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bnl-verifica"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/correos-esp"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/gestionebper"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/gruppobpersicurezza"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/infobper"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/informativaclient"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/login-bnl"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/login-clienti"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/sicurezza-bancamontepaschi"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/sicurezza-bancamps"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/sicurezzaverificamps"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/smartweb"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/validieren"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/verifica_bper"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/verifica_bper_web"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200069757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/~pixlge1/home/?utm_medium=social&utm_source=heylink.me"; http_uri; nocase; content:"s23.proserv.ge"; content:"Host"; http_header; classtype:attempted-recon; sid:200069758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/appforest_uf/f1665389895720x959084139761374700/elite-aym-dbs.html#user@domain.tld"; http_uri; nocase; content:"s3.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/appforest_uf/f1665958294650x825938812009372700/indexsy.html#user@example.org"; http_uri; nocase; content:"s3.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/appforest_uf/f1665989080007x904888553240642000/indexnew%20%281%29.html#info@example.net"; http_uri; nocase; content:"s3.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/appforest_uf/f1666073829953x139733717121704350/index.html?err=dfr0lvxifbzk6p8uau1o5pmw0samkuwzklnfj71gc3dl4datsiki2amgjnxqydluhdie0pmqfzwvzbmkgjsnwzxotx2zlso1eugd3a9jfvra9z6ti0l1zwdsvpog4yfwlw7qaqjomebjq5ipwjtccxinsde60exr7lihakxc7c90x0etx845abnbvuesn5npayme947ne6j5cnufwlicfyekuryna04ai8cfciq2&dispatch=57f5301hefb57ib5d6ic600c4c9e46&id=0jcg0f99k4b9h614h4gh233614a3eg08iihfe4cjk4ih5"; http_uri; nocase; content:"s3.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/appforest_uf/f1667388239404x533530856567202100/shareviddeee.html"; http_uri; nocase; content:"s3.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/appforest_uf/f1667989203084x308120792483162600/shareviddeee1.html"; http_uri; nocase; content:"s3.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/appforest_uf/f1667989365302x268586535321483140/shareviddeee.html"; http_uri; nocase; content:"s3.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/appforest_uf/f1668010152719x420935668580384450/index.html"; http_uri; nocase; content:"s3.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/appforest_uf/f1668013320306x749126796204061300/index.html"; http_uri; nocase; content:"s3.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/appforest_uf/f1668055438848x572431539654556500/index.html"; http_uri; nocase; content:"s3.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/appforest_uf/f1668079758368x501478210080304800/logs.html"; http_uri; nocase; content:"s3.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/appforest_uf/f1668350196940x475736267804376640/index.html"; http_uri; nocase; content:"s3.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/appforest_uf/f1668508621760x583034476253984800/index-wetransfer.html#"; http_uri; nocase; content:"s3.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/appforest_uf/f1668550622791x967783349488651200/shareviddeee.html"; http_uri; nocase; content:"s3.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/appforest_uf/f1668613824135x371179747730551600/bigshoenorton.html"; http_uri; nocase; content:"s3.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/appforest_uf/f1669146561398x519927072489608600/aj.html"; http_uri; nocase; content:"s3.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/appforest_uf/f1669295365588x903142850598679800/00000000000000000000000989.html"; http_uri; nocase; content:"s3.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/appforest_uf/f1669295365588x903142850598679800/00000000000000000000000989.html#info@aluminiumjon.nl"; http_uri; nocase; content:"s3.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/appforest_uf/f1669295365588x903142850598679800/00000000000000000000000989.html#info@ro-groep.nl"; http_uri; nocase; content:"s3.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dpdblankpage/biz14720.html#6aoex?cpwhtqcc1hx8cybd0ccchmcmc76mqdprbcbbb2v"; http_uri; nocase; content:"s3.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/progressivebank-uat/index.html"; http_uri; nocase; content:"s3.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/safiepace/refn26.html"; http_uri; nocase; content:"s3.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/azamzap/azamzap.png?img_pixel=kxuqdl1qfb1wjw5kuuqruyimv1y2sn"; http_uri; nocase; content:"s3.us-east-1.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wajduhzuhfyegiwjaiudauguagfugauf/offers-wajduhzuhfyegiwjaiudauguagfugauf.html"; http_uri; nocase; content:"s3.us-east-1.amazonaws.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/voipcallassist1/index.html"; http_uri; nocase; content:"s3.us-east-2.wasabisys.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/voipcallassist2/index.html"; http_uri; nocase; content:"s3.us-east-2.wasabisys.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/voipcallassist4/index.html"; http_uri; nocase; content:"s3.us-east-2.wasabisys.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/voipcallassist6/index.html"; http_uri; nocase; content:"s3.us-east-2.wasabisys.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/voipcallassist8/index.html"; http_uri; nocase; content:"s3.us-east-2.wasabisys.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/voipcallassist9/index.html"; http_uri; nocase; content:"s3.us-east-2.wasabisys.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/voipcallassist1/index.html"; http_uri; nocase; content:"s3.wasabisys.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/voipcallassist2/index.html"; http_uri; nocase; content:"s3.wasabisys.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200069790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/l0/https://lnkd.in/dtkemh_k/1/01000181edee1365-4264f7b0-9ab1-433f-bde7-5a51e550f60f-000000/ieg4om1atju-oqjrjgeit3bwfzm=277"; http_uri; nocase; content:"s4r9mj97.r.us-east-1.awstrack.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/l0/https://lnkd.in/dxnhhybc/1/01000181eecab6cf-769da54d-7b69-4125-84f0-dc49abe930cd-000000/t_-tkxz7q3rbxjaufqrdl3ugqcy=277"; http_uri; nocase; content:"s4r9mj97.r.us-east-1.awstrack.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/l0/https://lnkd.in/gczqssnv/1/01000181ef97b996-9967a6f4-660c-4b15-8e7b-e4d82fc18c31-000000/wreobv0u8fyjq2kivbylo-hy2wa=277"; http_uri; nocase; content:"s4r9mj97.r.us-east-1.awstrack.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200069793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2002.shtml?https://bafybeidk4vxm4src35fwdyo3jcapjlmp2jz2vexccdir426vee5c5mr6fu.ipfs.w3s.link/200.shtml?utm_campaign=m1+&_x_tr_hp=bafybeiemmf&_x_tr_sl=auto&_x_tr_tl=en-gb&_x_tr_hl=en-gb"; http_uri; nocase; content:"s5ixrmebarrd6dfvne54nlmbm6myu2aqt7bwcnhx4rsy6ul4-ipfs-w3s-link.translate.goog"; content:"Host"; http_header; classtype:attempted-recon; sid:200069794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saaaaaeeeiescssceoe.saaccacerseoorria.ylukru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saaaaeieesacseoe.saccsecoiaarser.ufsheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saaaaiceesecsesoe.sascacseoeraior.efxadu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saaaaiceesecsesoe.sascacseoeraior.ufsheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saaaaiseecseoe.saccseoicar.zxgyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saaaeaiescssceoe.saacaceseoorcriaas.zxgyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saaaieceesacseoe.sascsecoaiarser.ufsheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saaaieceescsceoe.sasacsceorari.doobbu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saaaieseecasoe.sacseoiacserr.ufsheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saacaceessaivcceaririccrsoorna.seieascaacirsoocaoeaosesoeosiren.xfemiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saacaceiseaivcseaririecrcsoroan.sieesaaccioeosoaoeaosesoeosiren.fsxvtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saaccecaicsairncr.soreaacsieosnaiciaoeaosesonseosiren.bcruiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saaccecaicsairncr.soreaacsieosnaiciaoeaosesonseosiren.korhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saaccecaicsairncr.soreaacsieosnaiciaoeaosesonseosiren.myxbtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saaccieaicsairecrcsoroan.sieesaaccioeosoinaoeaosesonseosiren.dtrjwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saaccisaiccairccrsoorna.seieascaacirsoeoinaoeaosesonseosiren.bcruiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saaccisaiccairccrsoorna.seieascaacirsoeoinaoeaosesonseosiren.xfemiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saacsecsesoe.sascasceoeai.ufsheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saaecescssceoe.saasacesceoorr.zxgyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saaeiascsceoe.sacacseocriaas.ufsheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saaeiascsceoe.sacacseocriaas.zxgyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saaeiescssceoe.saacacesceoorr.ylukru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saaicasecsesoe.sascaseoeacioras.ufsheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saaieacescssceoe.saasaceseoorcraias.doobbu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saaisacseoe.saccsecoiaas.ufsheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciccacsaacn.rulqiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciccacsaacn.xkbwcu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"saciccancsaascnn.idglzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"saciccancsaascnn.lersmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"saciccancsaascnn.xkujlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciccscaan.hbzatu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciceacn.ebhudu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciceacn.kdajfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciceacssace.rulqiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciceaen.ebhudu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciceaen.uouusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"saciceancsnascen.xkujlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"saciceancssascen.idglzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"saciceancssascen.xkujlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciceocn.kdajfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciceocn.uouusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciceoen.ebhudu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacicesas.ebhudu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacicesas.idzmgi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacicesas.kdajfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacicesccsnace.xkbwcu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacicesnccsnsacn.xkujlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacicsacscace.rulqiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacicsacscacn.rulqiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacicsacscacn.xkbwcu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacicsancscascen.idglzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacicsancscascnn.idglzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacicsancscascnn.lersmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacicsancscascnn.xkujlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacicssccan.hbzatu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciecacsaacn.rulqiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciecacsaacn.xkbwcu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"saciecancsaascnn.xkujlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciecscaan.hbzatu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacieeacn.ebhudu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacieeacn.kdajfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacieeacsnace.rulqiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacieeacsnace.xkbwcu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacieeaen.ebhudu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacieeaen.kdajfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacieeaen.uouusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacieeancsnascen.idglzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacieeancsnascen.lersmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacieeancsnascen.xkujlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacieeecnae.hbzatu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacieeocn.ebhudu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacieeocn.kdajfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacieeocn.uouusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacieeoen.ebhudu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacieeoen.uouusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacieesccsnace.rulqiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacieesccsnace.xkbwcu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacieescnae.hbzatu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacieesnccsnsacn.idglzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacieesnccsnsacn.lersmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciesacscace.rulqiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciesacscace.xkbwcu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciesacscacn.rulqiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"saciesancscascen.lersmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"saciesancscascen.xkujlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"saciesancscascnn.idglzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"saciesancscascnn.xkujlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciessccae.hbzatu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciessccan.hbzatu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciscacsaacn.rulqiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciscacsaacn.xkbwcu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"saciscancsaascnn.idglzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"saciscancsaascnn.xkujlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciseacn.uouusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciseacssace.rulqiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciseaen.kdajfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciseaen.uouusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"saciseancsnascen.idglzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"saciseancsnascen.lersmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"saciseancsnascen.xkujlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciseecnae.hbzatu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciseocn.ebhudu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciseocn.kdajfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saciseoen.kdajfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisesas.ebhudu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisesas.idzmgi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisesas.kdajfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisesas.uouusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisesccsnace.rulqiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisesccsnace.xkbwcu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisesccssace.xkbwcu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisescn.kdajfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisescn.uouusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisescnae.hbzatu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisescsae.hbzatu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisesen.ebhudu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisesen.kdajfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisesen.uouusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacisesnccsnsacn.xkujlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisoacn.kdajfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisoacn.uouusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisoacsnace.rulqiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisoacsnace.xkbwcu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisoacssace.xkbwcu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisoaen.ebhudu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisoaen.kdajfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisoaen.uouusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacisoancsnascen.idglzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacisoancssascen.lersmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacisoancssascen.xkujlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisoocn.kdajfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisoocn.uouusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisooen.kdajfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisosas.ebhudu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisosas.idzmgi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisosccsnace.xkbwcu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisoscnae.hbzatu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisoscsae.hbzatu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacisosnccsnsacn.lersmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacissacn.ebhudu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacissacn.kdajfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacissacn.uouusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacissacscace.rulqiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacissacscace.xkbwcu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacissacscacn.rulqiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacissacsnace.rulqiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacissacsnace.xkbwcu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacissacssace.xkbwcu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacissaen.ebhudu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacissaen.kdajfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacissancscascen.xkujlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacissancscascnn.idglzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacissancscascnn.lersmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacissancscascnn.xkujlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacissancsnascen.idglzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacissancsnascen.xkujlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacissancssascen.idglzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacissancssascen.xkujlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacissecnae.hbzatu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacissecsae.hbzatu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacissocn.kdajfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacissocn.uouusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacissoen.ebhudu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacissoen.uouusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisssccae.hbzatu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisssccan.hbzatu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisssccsnace.rulqiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacisssccssace.rulqiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sacissscsae.hbzatu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacisssnccsnsacn.idglzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacisssnccsssacn.idglzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacisssnccsssacn.lersmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sacisssnccsssacn.xkujlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saiaean-co-jp.acseese.lmyfiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saiaecn-co-jp.aeseese.uxwuzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saiaoan-co-jp.acseoese.lmyfiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saiaocan-co-jp.aesecoese.uxwuzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saiason-co-jp.acocese.lmyfiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saicecn-co-jp.aacaordnsee.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saicecn-co-jp.accardeseen.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saicecn-co-jp.aecardnseen.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saicocn-co-jp.aacaordonese.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saicocn-co-jp.aacardoseen.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saicocn-co-jp.accaordoeese.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saicocn-co-jp.accaordosee.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saicocn-co-jp.aecaordoeese.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saicocn-co-jp.aecaordsnese.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saicocn-co-jp.aecardenesen.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saicocn-co-jp.aecardoeesen.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saicocn-co-jp.aecardonesen.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saicocn-co-jp.aesaordenes.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saicocn-co-jp.aesaordoees.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saicocn-co-jp.aesaordsnes.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saicocn-co-jp.aesardonese.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saicsacseoe.sascsecoaias.zxgyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saicscn-co-jp.aacaordnsee.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saicscn-co-jp.accaordesee.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saicscn-co-jp.aecaordnsee.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saicscn-co-jp.aecardnseen.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saicson-co-jp.aaocnse.lmyfiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saiecascsceoe.sasacseocraias.doobbu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saiecascsceoe.sasacseocraias.iddr8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200069996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saiecascsceoe.sasacseocraias.ufsheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"saiscasoe.sacsceoias.ylukru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saiseen-co-jp.aesense.uxwuzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200069999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aacaordncoe.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aacaordncoe.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aacaordncoe.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aacaordncoe.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aacardnscon.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aacardnscon.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aacardnscon.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aacardnscon.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.accaordecoe.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.accaordecoe.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.accaordecoe.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.accaordecoe.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.accardescon.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.accardescon.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.accardescon.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.accardescon.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aecaordecoe.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aecaordecoe.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aecaordecoe.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aecaordecoe.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aecaordncoe.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aecaordncoe.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aecaordncoe.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aecaordncoe.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aecardesco.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aecardesco.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aecardesco.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aecardesco.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aecardescon.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aecardescon.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aecardescon.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aecardescon.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aecardnscon.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aecardnscon.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aecardnscon.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseoan-co-jp.aecardnscon.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseocn-co-jp.aacardnseen.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseocn-co-jp.aacardnseen.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseocn-co-jp.aacardnseen.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseocn-co-jp.aacardnseen.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saiseocn-co-jp.aecaordesee.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saiseocn-co-jp.aecaordnsee.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseocn-co-jp.aecardeseen.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseocn-co-jp.aecardeseen.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseocn-co-jp.aecardeseen.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseocn-co-jp.aecardeseen.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseocn-co-jp.aecardesen.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseocn-co-jp.aecardesen.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseocn-co-jp.aecardesen.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saiseocn-co-jp.aecardesen.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saisoean-co-jp.aescconse.lmyfiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saisoean-co-jp.aescconse.uxwuzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saisoen-co-jp.aesconse.lmyfiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saisoen-co-jp.aesconse.uxwuzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aacaordocoe.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aacaordocoe.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aacaordocoe.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aacaordocoe.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aacaordocose.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aacaordocose.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aacaordocose.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aacaordocose.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aacardoncoen.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aacardoncoen.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aacardoncoen.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aacardoncoen.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aacardoscon.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aacardoscon.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aacardoscon.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aacardoscon.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aasaordocos.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aasaordocos.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aasaordocos.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aasaordocos.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aasardoncoe.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aasardoncoe.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aasardoncoe.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aasardoncoe.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.accaordocoe.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.accaordocoe.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.accaordocoe.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.accaordocoe.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.accaordocose.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.accaordocose.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.accaordocose.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.accaordocose.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.accardoecoen.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.accardoecoen.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.accardoecoen.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.accardoecoen.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.accardoscon.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.accardoscon.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.accardoscon.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.accardoscon.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.acsaordocos.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.acsaordocos.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.acsaordocos.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.acsaordocos.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.acsardoecoe.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.acsardoecoe.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.acsardoecoe.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.acsardoecoe.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecaordecose.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecaordecose.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecaordecose.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecaordecose.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecaordocoe.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecaordocoe.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecaordocoe.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecaordocoe.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecaordocose.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecaordocose.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecaordocose.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecaordocose.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecaordscose.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecaordscose.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecaordscose.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecaordscose.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecardencoen.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecardencoen.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecardoecoen.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecardoecoen.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecardoecoen.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecardoecoen.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecardoncoen.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecardoncoen.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecardoncoen.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecardoncoen.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecardoscon.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecardoscon.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecardoscon.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecardoscon.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecardsncoen.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecardsncoen.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aecardsncoen.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesaordecos.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesaordecos.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesaordecos.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesaordecos.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesaordoco.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesaordoco.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesaordoco.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesaordoco.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesaordocos.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesaordocos.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesaordocos.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesaordocos.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesaordscos.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesaordscos.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesaordscos.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesaordscos.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesardencoe.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesardencoe.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesardencoe.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesardencoe.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesardoecoe.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesardoecoe.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesardoecoe.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesardoecoe.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesardoncoe.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesardoncoe.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesardoncoe.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesardoncoe.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesardsncoe.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesardsncoe.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesardsncoe.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisooan-co-jp.aesardsncoe.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saisoocn-co-jp.acsaordoees.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saisoocn-co-jp.aesaordenes.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saisoocn-co-jp.aesaordoees.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisoocn-co-jp.aesaordose.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisoocn-co-jp.aesaordose.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisoocn-co-jp.aesaordose.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saisoocn-co-jp.aesaordose.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saisoocn-co-jp.aesaordsnes.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saisoon-co-jp.aescose.uxwuzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saisosan-co-jp.aesccense.lmyfiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.aacaordncoe.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.aacaordncoe.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.aacaordncoe.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.aacaordncoe.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.aacardnscon.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.aacardnscon.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.aacardnscon.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.aacardnscon.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.accaordecoe.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.accaordecoe.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.accaordecoe.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.accaordecoe.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.accardescon.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.accardescon.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.accardescon.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.accardescon.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.aecaordecoe.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.aecaordecoe.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.aecaordecoe.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.aecaordecoe.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.aecaordncoe.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.aecaordncoe.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.aecaordncoe.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.aecardescon.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.aecardescon.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.aecardescon.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.aecardescon.rgfpfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.aecardnscon.doopeu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.aecardnscon.fqfazu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php?u=2"; http_uri; nocase; content:"saissoan-co-jp.aecardnscon.kxywou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saissocn-co-jp.aecardeseen.grptou.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"saisson-co-jp.aeocnse.uxwuzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-content/themes/seotheme/lnkl/ios/oauth2/"; http_uri; nocase; content:"sanoapetit.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-content/themes/seotheme/lnkl/ios/oauth2/index.php"; http_uri; nocase; content:"sanoapetit.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sasiscacsaacn.rulqiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sasiscacsaacn.xkbwcu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sasiscancsaascnn.lersmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sasiscancsaascnn.xkujlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sasiseacn.ebhudu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sasiseacn.kdajfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sasiseacn.uouusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sasiseacsnace.rulqiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sasiseacsnace.xkbwcu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sasiseaen.kdajfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sasiseaen.uouusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sasiseancsnascen.idglzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sasiseancsnascen.lersmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sasiseocn.kdajfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sasiseoen.ebhudu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sasiseoen.kdajfu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sasisesccsnace.rulqiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sasisesccsnace.xkbwcu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sasisescnae.hbzatu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sasisesnccsnsacn.idglzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sasisesnccsnsacn.lersmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sasissacscace.rulqiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sasissacscace.xkbwcu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sasissacscacn.xkbwcu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sasissancscascen.idglzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sasissancscascen.lersmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sasissancscascen.xkujlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sasissancscascnn.idglzu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sasissancscascnn.lersmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ai/login.php"; http_uri; nocase; content:"sasissancscascnn.xkujlu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp.php"; http_uri; nocase; content:"sasisssccan.hbzatu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/default/redirecttoken/06c2a8d9-0073-49d6-82824f93a76a5488"; http_uri; nocase; content:"schwab.bynder.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/default/redirecttoken/0c61ae2a-aaeb-47b4-9f80b4b2460806a7"; http_uri; nocase; content:"schwab.bynder.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/default/redirecttoken/6022b9ca-7cab-4d7f-95e470e31d65c487"; http_uri; nocase; content:"schwab.bynder.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/default/redirecttoken/76081460-72a2-4086-9b2abf764d229b92"; http_uri; nocase; content:"schwab.bynder.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/default/redirecttoken/7fe875f1-619b-4347-acf8dcbedae4e387"; http_uri; nocase; content:"schwab.bynder.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/login/redirecttoken/06c2a8d9-0073-49d6-82824f93a76a5488"; http_uri; nocase; content:"schwab.bynder.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/login/redirecttoken/5c4a280e-08fa-4935-b7eb724563145fc8"; http_uri; nocase; content:"schwab.bynder.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/login/redirecttoken/6022b9ca-7cab-4d7f-95e470e31d65c487"; http_uri; nocase; content:"schwab.bynder.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/login/redirecttoken/7fe875f1-619b-4347-acf8dcbedae4e387"; http_uri; nocase; content:"schwab.bynder.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/login/redirecttoken/82fc7a5c-a7a2-488c-9f3ed6949c8a2ca1"; http_uri; nocase; content:"schwab.bynder.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/login/redirecttoken/b0a5c1da-f023-44d5-b42f9941423d5ff5"; http_uri; nocase; content:"schwab.bynder.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/macros/s/akfycbxldfmsdlmc1xmyfvmhpijk0qxsnxurlh95jzz3qcvmodhollh-cgwk3ql47_ntzyajzw/exec"; http_uri; nocase; content:"script.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?m=0"; http_uri; nocase; content:"sdzakfahz.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.fajubu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"seacseccasorirn.osaeacesseocnaoeosnmer.gelxdu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/p.php?url=https%3a%2f%2fdev-itas5.pantheonsite.io%2fit%2f"; http_uri; nocase; content:"search.becovi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.fajubu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.gelxdu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.fajubu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.zdhku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.zdhku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200070262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/magalu-fatura/inicio/"; http_uri; nocase; content:"semnttrityt.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/p/postenno_9.html"; http_uri; nocase; content:"seonewsservic.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/443598119c66fb7bd3e950b6a59a442d897162598789d25751271bff9931cbb9af6dbbf3.jpg"; http_uri; nocase; content:"serving.photos.photobox.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/nwanespi862tnvsyahi017hx8/!$9)!&amp\;$!)0/!$)nsh!&amp\;$)).html"; http_uri; nocase; content:"sfo3.digitaloceanspaces.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1ia8wx96xqfcgc5wf401yugfm2b6"; http_uri; nocase; content:"share-eu1.hsforms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1nf2c-aodrjqdzggr2mg9xaevrta"; http_uri; nocase; content:"share-eu1.hsforms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/11c1i3ucrsjaeqnyxinop6ad5rxo"; http_uri; nocase; content:"share.hsforms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1fni_ent2sao6wqv0vzdn7g8nl9d"; http_uri; nocase; content:"share.hsforms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1onniqroftvoytwpvbgznvgd5749"; http_uri; nocase; content:"share.hsforms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1q6hj0hs8qeiyr1t5ntqimgd8cyx"; http_uri; nocase; content:"share.hsforms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1whluifnasr6s4ov9skogswd5n96"; http_uri; nocase; content:"share.hsforms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1zwug5hvmsuik9mhaflsx3gd9wnt"; http_uri; nocase; content:"share.hsforms.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/basic.php?k=d63621ef3dc01735479befc13f97ec7fdb68991d"; http_uri; nocase; content:"shared-document.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/docs_wpbooking/userpanel/uts/"; http_uri; nocase; content:"shinetheme.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/product/h5zibdt"; http_uri; nocase; content:"shoppy.gg"; content:"Host"; http_header; classtype:attempted-recon; sid:200070277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dhtvx"; http_uri; nocase; content:"shorturl.at"; content:"Host"; http_header; classtype:attempted-recon; sid:200070278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fiknr"; http_uri; nocase; content:"shorturl.at"; content:"Host"; http_header; classtype:attempted-recon; sid:200070279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/nqgu1"; http_uri; nocase; content:"shorturl.at"; content:"Host"; http_header; classtype:attempted-recon; sid:200070280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ful6dt"; http_uri; nocase; content:"shrtco.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200070281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/eaajfj3erbbcolgsmh3d-oo0gobdednakl9lja4cse2dpg"; http_uri; nocase; content:"siasky.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200070282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/eac7lyogqi7z3vzo20ybqocejqumeu9dywnkn-jf5vgrxa/#r.overeem@colasit.nl"; http_uri; nocase; content:"siasky.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200070283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/eacn8qyd7slkjmbp8nmn5hah7-fymf9qjkc2jolw_4apkg/"; http_uri; nocase; content:"siasky.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200070284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/eadegp8olvx30uebqoj3bpsgpy3uxb-f8hcwq2hu9rioha#contact@sceneworld.org"; http_uri; nocase; content:"siasky.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200070285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/faaeeyy2xpy28p1ji6xfg_forxtjqlfxg1dguaenkjtspw"; http_uri; nocase; content:"siasky.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200070286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/faatfkusii4y_qdyxlrylhmrwxnsi0zdvjc4ogfsn_-0yq"; http_uri; nocase; content:"siasky.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200070287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fabi3nifmvbemdr3vfnnartz-odinrt6mbhlscx8lu4uda?548f417f-3f21-11ed-959c-4a6c380351b548f417f-3f21-11ed-959c-4a6c380351b548f417f-3f21-11ed-959c-4a6c380351b548f417f-3f21-11ed-959c-4a6c380351b548f417f-3f21-11ed-959c-4a6c380351b548f417f-3f21-11ed-959c-4a6c380351bvv548f417f-3f21-11ed-959c-4a6c380351b548f417f-3f21-11ed-959c-4a6c380351bvv548f417f-3f21-11ed-959c-4a6c380351b548f417f-3f21-11ed-959c-4a6c380351b548f417f-3f21-11ed-959c-4a6c380351bv548f417f-3f21-11ed-959c-4a6c380351b"; http_uri; nocase; content:"siasky.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200070288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fabmjfbda7cmfwdxg7n16qntvuwpae-neagxvowf4e412a"; http_uri; nocase; content:"siasky.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200070289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jac_9qb2gdgkzkstg365bvxz1kwacmr_ontfws2lxtrwoq"; http_uri; nocase; content:"siasky.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200070290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jaddbvvmtjzmhk926rv8l8pyywcrvxfwmcvsvczxigzilw/"; http_uri; nocase; content:"siasky.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200070291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mac-vbhq5a1eyo524co6rtddnladglfzz1zebgibe5pfsw"; http_uri; nocase; content:"siasky.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200070292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/nadzq3ttpyl2w4s6yoiay25ycod_1kup7p_f80mcrn4boa"; http_uri; nocase; content:"siasky.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200070293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/paaghaqtnzioc9bpneuxn6vrnjwbopyp02qhttrypa4n-a"; http_uri; nocase; content:"siasky.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200070294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/paaygefplgc2xqy3aaysqgh6blw-qjtmub_chbh4n8h2_a"; http_uri; nocase; content:"siasky.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200070295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/padby7tx9fh5kexet6bn1nfdcnwu0vxm8dzuymjnfchvsq"; http_uri; nocase; content:"siasky.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200070296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/vacjfe3dmwbochzm44cfibdxbqsq_7lzcodsu-p4gmi9yq"; http_uri; nocase; content:"siasky.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200070297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/zada4knsd_j49it5ddu81ndkglegivllwtcd1pxmcucbha"; http_uri; nocase; content:"siasky.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200070298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/telekom/ios/oauth2/index.php"; http_uri; nocase; content:"sihagest.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp"; http_uri; nocase; content:"silverlightproject.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/publish/xhrdvc"; http_uri; nocase; content:"simp.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200070301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/#/?code=58858608"; http_uri; nocase; content:"sinkeffect.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200070302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a/sy4norton.com/setup/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/amricalturs.net/download4/microsoft-office-365"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/amricalturs.net/ks3/microsoft-office-365"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/crypto-coinwallet.com/exoduswallett"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cryptologn.com/exoduswallet"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cryptouswallet.com/exoduswallett"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/empacesso.com/acesso-empjnet/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/n12-netempresarial.com/empresa-nerd-n12/in%c3%adcio"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/newservices.website/orange-mobiles/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/newservices.website/service-reglement/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/newservices.website/service-reglement/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/site/e9d24c72/23524457"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/site/habbotuttogratis/assignments"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/site/libretyreserve"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/site/libretyreserve/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/site/protectedinmprovmnt44/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/site/safetycheck427064200647221/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/site/verifycheckpointpaqes/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/traconf-it.com/flashyfile/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/000-receive-updates"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/019businessusersbt782btsignin/secure-update-com"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/02amr/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/02amr/in%c3%adcio?fbclid=iwar3mrbvofnbxaas_uqnay9ztznoukehgpezvy26_sb4k4telqeum4c8lz6a"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/04-am/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/08ie-securepage-facebook"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/09188-securepage-facebook"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/09securebusinessusersonly-/secure-bt-com"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/0iey-securepage-facebook"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/10101-securepage-facebook"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/10120014/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/103002150124/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/108-securepage-facebook"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/110540-securepage-facebook"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/110548800-securepage-now"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/12noreplybtuserconnect365offic/secure-bt-com"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/1f21igtsvwdsbeh3wq9gncf8drwgd/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/1mailxverificatio/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/2-orangebank-salva/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/3-orangebank-vetch/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/302dir/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/3254798fr78/uigiugi"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/3489t3ty93yt834tsdjfsbfjkbsdf/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/4-orangebank-toto/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/443edxsjkl8/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/565f34/microsoft-office-365"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/65h7t65ygtdw5f4/bt"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/65q-securepage-facebook"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/79vibij/security-support-2022"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/7wr/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/91186co/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/98w72securebusinessbt-01/secure-update-com"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/9ai1/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/a3y-securepage-facebook"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/abobommw-a02/in%c3%adcio?fbclid=iwar2qbi6f48bttqgqaxdt8eclxwyu3oze0t1ks6qipbgmu4hetmdrj3bsic8"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/abobommw-a05/in%c3%adcio?fbclid=iwar1yjxuarkij0fwhqdwmj-mlksq5eop8cqlngychivy9cuw1_0f383jrhj8"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/abuse-privacy/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/access-office-aud-msg-us/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/access-office-docc-us/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/access-office-docxpdf-call-net/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/access-voice-mail-pay-us/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/acceuilboitevocaleorange/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/accs-office-ml/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/accs-p-o-us/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/accs-po-pay-m-cd-us/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/accs-pur-pyt-us/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/accsoffice-usa/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/acont-verife/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/acoun-veriif/recovery"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/acount-confrimation/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/activationagrisecuriplus/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/adrianoferriani/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/alert-app-pages/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/alertsretardon"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/amporangefr/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/amsohappy/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/app-mobile-uuid/recovery"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/appli-ob-securite/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/appli-ob/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/appli-obank-serv/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/appli-scur-obankps/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/applkactu/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/apps-authentification-forte-ob/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/apps-mbl2/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/apps-obank-apli/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/apps-secure-ob/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/apps-securite-ob/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/aqwsas"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/asdfghjklhgfdsdfgh/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/asfvcas"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/assdffee"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/assdfr/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/atendimentomarnobre/p%c3%a1gina-inicial"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/att-mail-update/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/att-managements/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/attemailfox7/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/attemler7/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/attfeatures/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/attjdjkfk/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/attmaillogservise/attmail"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/attnet-104921/att"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/attnetlogsignmail/att-net"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/attnetlogsservce/att-net"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/attonline00/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/attserv111cust/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/attttstttegegrsksw/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/attudnie/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/attupdateobo/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/attweb22/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/attweblysiteupgrade/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/attyahooohroffice231/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/autentificationforte/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/authen-secure-obank/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/authentification-apps-ob/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/authentification-ob/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/authentification-orangebank-eu/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/authentifications-ob/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/awspage"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/azssdf/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/b6ljxyar/information-page-report"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/b8546dr/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/background-in"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/bacopremolista/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/baltimoreassessoria"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/banquepostalebanqueetassurance/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/bbroadband110/home?authuser=4"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/bbtbroadband/home?authuser=9"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/bcp-mille/home-page"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/bdbbbb/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/benachrichtigung-sparkasse/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/bescentraldeatendimento/p%c3%a1gina-inicial?gclid=eaiaiqobchmix5y44p_g-wivnevcch1dwggueamyaiaaegi7xpd_bwe"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/bienvenue-carrefour-banque-ass/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/biorange/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/bletoemisao/in%c3%adcio"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/brbbbbb/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/broadbandplc/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/bt-2022-user/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/bt-cloud-voice-review-voice/bt-voice-cloud"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/bt-clould-preview000112/voice010101010bt-cloud?authuser=8"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/bt-pdf-receipt-payment/www-bt-pdf?authuser=8"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/bt-users/secure-business-bt-com"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/bt-voice1010010/bt-voicemesaage10120201002?authuser=8"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btbillreview/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btbraodbandteam/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btbriadbandteam/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btbroadbandlin/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btbroadbandplc/home?authuser=7"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btbroadbandplc1/home?authuser=1"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btbroadbandteam/home?authuser=5"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btbroadbandweb/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btbroadli/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btbtbtbtbtbtcomm/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btbusinessx/bt"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btcenteradmncare/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btcloudpaymentinvoice202000/httpsbtcloudvm-voice-new?authuser=1"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btcloudvoice-mv0001/home?authuser=3"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btconnectbusiness/btconnect"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btconnectmailserver/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btconnectsecurebusinesbtcom/bt-connect"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btemailwebmailer/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btinternet42day/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btinternetco/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btinternetsmailiasedwdasd/btinternet-mail?authuser=8"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btmail2/home?authuser=2"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btmailerupdatee/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btmv-voice-notice011/btvoicemessage?authuser=8"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btnvm-urgentnotice/btvmnew-note?authuser=1"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btserver10/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btsuporteamsup/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/bttbriadbandteam/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/bttbusinesssss/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/bttelecom/home?authuser=1"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/bttelecomm-/home?authuser=5"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/bttelecomm0/home?authuser=2"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/bttelecommication/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/bttelecommservice/home?authuser=5"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/bttelecommunication-plc/home?authuser=2"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btuiytretyudfgjh/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btwebmailww/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btwebsuppor/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btweeb/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btworkking/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/businesbtnewbroadband-hub/update-bt-com"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/business-btbtb-office365/secure-bt-business-com?authuse%20r=3"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/business-btbtb-office365/secure-bt-business-com?authuser=3"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/businessbtxpress/update-bt-com"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/buxtonbreweryofficial/official"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/byjrum/recovery-page-support"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/capitaloneloginus/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/ccjkc/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/certiauthavril/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/charlisto/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/chekckcpoint-confirmmrecovery/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/chekckcpointconfirmrecoveryy/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/cirrusunversiteparissaclay/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/clickpagenewlogin2021"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/cltytytyt/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/clxyxsnh/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/coinsbuysellswapcryptocurrency/?fbclid=iwar2isl9xfxxgcxtftml2hmcl_dglhshlkfkpdotycyqu-qjqqfdqm9whtfm"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/comfimobiekdofl/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/community-pages-app/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/community-relief-program/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/condado-duo-luis-pagan-/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/confirmation-orangabank/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/confirmationacces"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/confirmationacces/verify-pages"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/confirrmrrecoveryy/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/confrim-acon/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/connect-metamask"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/connectionofpage"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/connectionperdue/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/connectolo/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/connectsvqq"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/consecurty"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/construtoralopesfreitas"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/control-service/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/controlpanel-ovh?/48700315fr640w648"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/couldie/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/ctz03"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/currentlyserver/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/cvrpd/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/d-aps-orge-secure/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/dambt/home?authuser=6"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/damilolwas/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/damilosadde/home?authuser=7"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/dasbvmk/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/debloquagedescompte/page"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/dessac/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/dfghjhckuyf/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/dfghjhl/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/dgjhjjojhgffg/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/dhddfhdfhcom/att"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/directionobweb/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/dispo-obankweb/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/divsec20/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/dkdfkazii-ofoqisjaz1wk/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/dkekkeole/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/doelza/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/dshrkuoiuhgkjkjlkmjyhhfhj/bt"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/eaglemaddez/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/eikp-securepage-facebook"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/emreszra/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/erydkjsdkhfgjfhjdkh/bt"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/es-pace-clien-ts/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/espa-ce-de/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/espace-orange-vocal/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/espace-vocal-orange/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/espace-vocalorange-ref0325/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/espace-vocalorange-ref0325/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/espaceclientscuritvfvfdsvsf/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/espacemessagerieorangesms/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/estomcasting/accueil?authuser=1"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/etyajdnxnskoeprlwyaxbdhfkrituy/btconnect"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/eu95mztyp/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/exodus-wallet-shared-rewards"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/fabienlaracico004/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/fac-tura-tion-esp-ace05/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/factu-re-clients/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/fantasticpage-in"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/fatherplac/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/fattiu776/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/fatu-ration-esp01/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/fcg133/att"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/feelblessed/bt-business"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/feriousca/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/ffduefuefsbc/att"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/flmkgknzklfgklfgk/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/form-recovery/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/form-recovery/details"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/france-banque/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/frdfhhh/yahoo-mail"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/fscdsh/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/fssghsfd/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/gajiview/yahoo-com"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/gdhbfcxzx"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/ger5urftre/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/geregegegett43435354345/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/ggfhftwyjfj/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/gmxmailerfttfd/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/gmxupdate/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/golppu/page-recovery-2022"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/gsdeaq"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/happy-wins-01/in%c3%adcio?fbclid=iwar0pmjif9huappghzbgzjvad--ck1qhhuuwyaxz5jm1wptivif4p3ipszng_aem_aqtm1vhpegtla0lbiu4ooe6tfov-cou8pjeti0lnwhrqgldr3es-yrho38lotz3ypy6tsfffmdd5i5kfinbruiiljzyw8qfowemrh8_qdsfkqq520purlzbal9ud0kol1vm"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/hardt-uo/halaman-muka"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/hbxchx"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/hccwc/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/hfggdfyhcom/yahoo-mail"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/home-bt-updates/bt-com"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/home-pages-recovery/details"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/hommem-loggiinnformm/home?authuser=2"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/httpbtbroadband/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/htvvss/home?authuser=3"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/hvgfdcftfttf/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/hweifiwgefwfgywegyfw/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/ii-securepage-facebook"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/incomm-sso"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/inf0ssgss/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/infoline439pent0line/accueil/untitled-page/fdsls32?authuser=6"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/invoice-payment-pdf/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/invoicehomepdf/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/ivxep9/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/jcnvvn/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/jdvdksf/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/jjjjeeebbbbb/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/jkhcxy/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/jkhcxy/home/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/jlkb6rf/apps-support"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/jmjmnhvdc/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/jnbhgv/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/juif00012/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/kflkllf"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/kjffrrr/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/kjhjljkh/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/kjhydc6yh/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/kjnbhgvcfd/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/klklklkutu/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/koiuld2dkjcxnjk2s/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/ksdrtfs"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/ky4qfhk5/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/landbankredirect/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/leafadd/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/leafpadrode/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/lidl-bg22/bg?fbclid=iwar3vyju-ddafnwfna5hgyotzwb0pjkbcfmwydmyrixienrmngx7gzksmlom"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/line01-centre/accueil?authuser=2"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/lkdiur24/accueil/secureli20"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/lkoeir3190/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/llllogin-home-pageaa1/www-btconnect-com"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/log-inpagenew"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/loltym/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/mail-upgrade/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/mailtoh/home?read_current=1"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/mailyahooservicesverifynow/home?read_current=1"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/mallhitoh/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/mallofuaq/halaman-muka"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/manager3-controlpanel-ovh"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/maxatserv/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/maxmaner/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/mcwdbvefjberjrwgnwriviwr/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/messagerie-vocalorange-gms-mms/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/messagerie-vocalorange/accueil?authuser=2"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/messageriehtlmxccvsdfvf/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/messor/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/mkoasl"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/mldof"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/mmanuel/attyahoo"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/mndirilivin-online/verifikasi"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/mnoko"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/mobile-apps-pages/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/mobile-redirect-system"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/mobilepromo-day4/in%c3%adcio?fbclid=iwar1wm9qffz0mvbdqzdagdwyaghkugpxdjbtp62ltwfpbek4_osei_ewvzw8"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/monbonusclicetmoi/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/moreira-importeexport"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/mssft22/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/mv-voicepage/home?authuser=8"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/myatt-home/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/mycoinwallet/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/n12-acessologinempresanet"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/n12-acessologinempresanet/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/nambusae"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/name29/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/necrologieinfosfroravocal/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/nefsuddma/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/new-service/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/newbtmissedcall/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/newuploadpage"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/newvoicemail/home?authuser=1"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/nextprojectpage"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/nextprojectpage2022"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/notice-pagesecure"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/noticeplaypagenew2021"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/noticepublicpagenew2021"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/noticeservice2022"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/notifcationnoticesystempage"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/nouveau-sms-message-vocal/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/ob-certifier/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/ob-identifweb/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/ob-seccurite/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/ob-securite-/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/ob-securite-eu/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/ob-securite/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/ob-securites/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/ob-service/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/ob-verifie/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/obank-authentificat-forte/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/obespaceweb/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/octoberpdfbill/bt-home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/office-com-mail/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/office-srv-cnt-us/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/offiice-voice-com/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/online-zkb-0"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/online-zkb-1"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/online-zkb-2"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/onlineemail890/home?authuser=1"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/onlinefifthercheckaccout/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orangbnk/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orange-b-securite/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orange-espace-client1/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orange-facture1/admin"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orange-forfaits-et-mobiles"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orange-forfaits-et-mobiles/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orange-forfaits-et-mobiles/accueil?authuser=1"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orangeb-190/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orangeb171/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orangeb221/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orangeba/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orangeban/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orangebank-22/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orangebank-r/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orangebank-sc/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orangebank-secure-secure/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orangebanksecurite/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orangebannk/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orangeclient2/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orangeclient2/fact458"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orangehtmlcofirmationqcdsvcdvf/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orangeibank/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orangeinfosvocalnews/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orangemms/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orangemyconnect/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orangesecurishtmlvnc/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orangesupp"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orangesupp/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orangevocalwebmaildigital/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/oranggebank/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orangiebank/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/ormas/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/p2j/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/p2k3oqt/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/p85nrn/recovery-page-support"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/pagenewlogin2022"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/paissnsns/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/pass-press/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/pay-ez-vo-tre-fa-cture/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/paypal-customer-services/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/paypal-loginn/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/persianasvedaluz?gclid=eaiaiqobchmimpc7g_hg-wivdgurch1nbwe4eaayayaaegl4bfd_bwe"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/pfherjwlsnmcyelwudy/home?authuser=3"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/playalertsonretars"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/playnewonmeta"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/pleasecheckpoint2021"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/pleaseclickplaypagenew"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/pleaseclicktopage"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/portailscuritorange-03/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/postacerticodplusaccaccueil/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/preferences-coordonnees?bredbanquepopulaire.fr/authentification/transactionnel"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/projectupdatepage2022"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/protonmailservice/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/pstbrand"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/pushfarcot/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/quickmailer/yahoo-com"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/quickteamservice/yahoo-com"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/r64t9/security-page-recovery"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/recatss/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/redirect-acctpages-uuid/details"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/redirectme-to/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/redirectmybank/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/regionphfrancecentrerelations/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/regionphp/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/regl-ement-fac-tu-re/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/repairnextsteps"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/retardblockingnotice"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/retardsalertplay"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/review00zzz01/bt-home-com"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/reviewappspagerviicee/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/richcoff/bt-business"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/rimekahsdjg/summary_page"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/rnorangefisrt/12547op"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/rs6nt6ih/meta"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/rvcefte/recovery-suport"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/sadcfasdc?facebook-security/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/safeboxaddresssender/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/salimkaso/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/saudipost-spl"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/sbc-106616/att"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/sbcglobalm/home?authuser=1"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/sbcglobalmaillerrrr/att-net"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/sbcglobalnetbellsouth/att-yahoo-mail-com"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/sbcglobalupdate/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/sbcweb22/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/sdbdbdbdbd/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/section-ob-web/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/secure-bt-homevoice01010120/home?authuser=8"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/secure-ob-/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/secure-ob/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/securebtusers/businessbt"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/securenoticepage2022"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/securiespace-clientpersonnel/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/securiplus0101/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/securite-app-obank/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/securite-ob-service/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/securite-obank/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/securitee-ob/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/securites-ob/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/securree/home?authuser=1"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/securritee-ob/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/securty-pages/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/seecurebusiness-/bt"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/sefunjikan/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/serpihanlah88"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/serv-appli-ob-fr-2022/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/serv-appli-obank-fr/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/serv-espace/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/serv-ob-authentification/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/serv-ob-securite/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/serv-ob/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/serv-obank/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/serveur-communication-box/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/servi-orangbank/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/service-apps-obank/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/service-orangebank-fr/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/service-orangebank-securi/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/service-securite-ob/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/servicenewlogin"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/seuysihofficebtbusinessbrir/bt"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/sgdfgetf/att"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/sharepointofbandhan/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/shgeudh/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/sitatt/home?authuser=3"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/sitgandii/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/ski03/strona-g%c5%82%c3%b3wna"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/sobartuil/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/soeyankandi5/bt-business"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/suuupp5432/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/szdgsdhgd"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/taffac1/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/tczpq/recovery-pages-2022"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/texaschildneurology/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/tg5oltrd0/information-page-business"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/thenewstartpage2021"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/theservvvvvvv11ajw2/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/tintasipe"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/titat6867gghm00/%d8%a7%d9%84%d8%b5%d9%81%d8%ad%d8%a9-%d8%a7%d9%84%d8%b1%d8%a6%d9%8a%d8%b3%d9%8a%d8%a9"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/tq4rdkn8/security-page-info"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/trade-skins-csgo/cs-money-trading-bot-for"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/trade-skins-csgo/cs-money-trading-bot-for?gclid=cjwkcajw4jwzbhapeiwatjun0dl_fgxbxvn3xtp0a2awuttz4ieqicpiuzcaltoy8hpg0i8gjnz78hocqzuqavd_bwe"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/trewyyuuu/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/tsaftez1/information-page-recovery"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/tyryrtrtrtyyt/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/uiora"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/ukhdggdfgd/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/update-allreadypage"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/updatesecure"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/updatingnewpage"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/upgrade-bt/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/upgradt/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/usaconnectingcom/att-yahoo"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/usaoush/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/utereue/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/utututttu/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/uuhqv/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/uzl2kop/?faacebook.com"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/uztdexcs/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/v-ob/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/venmo-loginusa/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/verfy14567/opensea-nfts"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/verif-ob/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/verificat-mobi-obank/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/verificat-mobile-obank/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/verificat-orangeb/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/verificati-ob/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/verifmail03/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/vfbjf/btconnect"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/vfdffktt/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/viewyournewbill/bt-business-btconnect"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/viewyourrbilll/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/vjsdhdfidjasi/btconnect"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/vkjjjerljjarea/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/voipnotevocale/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/votre-mise-a-jour-de-votre-ca/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/votre0101/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/votre04/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/votre1/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/votre12/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/votreone/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/wallet-near/near-wallet?gclid=eaiaiqobchmilkxyoryq-givjmltch3fmqwleaayaiaaegkahfd_bwe"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/walletliveconnect/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/watchingregard/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/wazxbnm/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/webespaceclient-ref8/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/webmailbt/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/webmailbt23/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/weebmail123/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/weelcomsign/accueil"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/wkjody/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/wrttt/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/ws0l"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/www-signin--com-cancel-reset/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/x6e1fn/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/xcccjcdhasks/btconnect"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/xmicrosoftoficew/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/xvhfefef/bt-business"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/xvzvgvdsf"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/xxbmicrosoft/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/yah000/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/yah00mall/home/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/yahooend/yahoo"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/yahookwhjf/home"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/yahoolip/yahoo"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/yahoomailingdesk/yahoo-com"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/yahoonice/yahoo-com"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/ydkyf/yahoo"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/ymchitkweed08"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/yutyas"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/zkb-online-3"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/info.html"; http_uri; nocase; content:"solucionesachgt.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?m=0"; http_uri; nocase; content:"soufritont.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/60oghgwcy4"; http_uri; nocase; content:"sparka-kundenkredit.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/stt-c4968a"; http_uri; nocase; content:"sprw.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200070909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?email=dataprivacy@corp.gmx.com"; http_uri; nocase; content:"ssleatherhandicraft.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?email=redacted@abuse.ionos.com"; http_uri; nocase; content:"ssleatherhandicraft.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/hwpahwpa9hwpa7"; http_uri; nocase; content:"st.fanlink.to"; content:"Host"; http_header; classtype:attempted-recon; sid:200070912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?gclid=eaiaiqobchmi94bpzz-j-givg9kych0yigapeaayasaaegiwu_d_bwe"; http_uri; nocase; content:"star-atla-experienc.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/:b:/g/personal/mandyb_steiner_co_za/exxq1passetnrojoe83fzboboxufoggwb7uvmyfqbionla?e=4:su8jhq&amp\;at=9"; http_uri; nocase; content:"steinercoza-my.sharepoint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-content/themes/twentyfifteen/css/read/chinavali/index.php?email=jsmith@imaphost.com"; http_uri; nocase; content:"stolizaparketa.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200070915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/login"; http_uri; nocase; content:"storage.aimhinet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1lordman1man3/kelmanco.html#email=info@domain.tld"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1lordman1man3/oscman.html"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1lordman1man3/oscman.html#email=info@domain.tld"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1lordman1man3/oscman2.html#email=info@domain.tld"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1lordman1man3/oscman2.html#user@calstatela.edu"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/acc03lzzl4m3izm03iauserpowa.appspot.com/index.html#user@calstatela.edu"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/algebraic-pact-316913.appspot.com/index.html#jbell@legalshield.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/anaagc040gdyacgd0dyuser.appspot.com/index.html#user@calstatela.edu"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ciat3tdtttd53c3e5userp.appspot.com/index.html#jr@legalshield.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ciat3tdtttd53c3e5userp.appspot.com/index.html#paul@legalshield.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/clientid4dunptjlryzrift3nrlomi160gqntzgznajujcnbszq8w/index.htm"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cmc111/cdo-nwst1.html#helpdesk@widomaker.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cmc111/chaidon.html#a@b.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cmc111/dm.html"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dhngw6p6rwrwnuv6vnuse.appspot.com/index.html#brianvillacarlos@legalshieldcorp.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/g58t3e588ddgmdeddauth.appspot.com/index.html#jim-shelvy@legalshield.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/gu1r0utjruhjkukrxhauser.appspot.com/index.html#user@calstatela.edu"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/https3a2f2fofficeuser2fowa2fresourceopenidmsdclientid727c9d/index.html?authuser=0"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/indettn/oscman2.html#cert@soc.tdc.dk"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/indettn/pdflmanco.html"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/indettn/pdflmanco.html#user@calstatela.edu"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/indettn/zdewaman.html#example@example.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/kkkqkl633qn6kq3lqssiiddnenen.appspot.com/index.html#jbell@legalshield.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/kkkqkl633qn6kq3lqssiiddnenen.appspot.com/index.html#t.voit@legalshield.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/lllumin/kcautoindex.html#pa-ed@gtig.qa"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/index.html#martin.manasek@ruk.cuni.cz"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/logonservices8g7gs65gs9bs66vds7bd9nd/index.html"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/lttna/zkele1.html#acctbilling@widomaker.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/lttna/zoscman414.html#user@calstatela.edu"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/maintainancecomponeta.appspot.com/aliexpressautoindex.html#dan@danaxtell.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/maintainancecomponeta.appspot.com/index.html#a@b.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/maintainancecomponeta.appspot.com/kayindex.html#eimaste@stinpriza.org"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/maintainancecomponeta.appspot.com/myautoindex.html#example@example.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/maintainancecomponeta.appspot.com/myofficeindex.html#@yorku.ca"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/maintainancecomponeta.appspot.com/myowngeneral.html#eimaste@stinpriza.org"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/maintainancecomponeta.appspot.com/newkaraindex.html#a@b.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/maintainancecomponeta.appspot.com/newmineindex.html#user@calstatela.edu"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/maintainancecomponeta.appspot.com/webappindex.html#example@example.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/owuddqd9dqqdddq9qd0caerq.appspot.com/index.html#stevewilliamson@legalshield.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/projerroro0h5j5ro0jrrj.appspot.com/index.html#user@calstatela.edu"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/q90qqqar22r229r292euser.appspot.com/index.html"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/q90qqqar22r229r292euser.appspot.com/index.html#user@calstatela.edu"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/qaqonqfaqvq0fni33q0x.appspot.com/index.html????dddd"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/qaqonqfaqvq0fni33q0x.appspot.com/index.html???v"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/riltool/karasecondautoindex.html#info@mup.cz"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/riltool/mrkautoindex.html#a@b.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/rrdar99rt9qraraq99euser.appspot.com/index.html#user@calstatela.edu"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/s0pts0apttxpp00atarrauth.appspot.com/index.html#user@calstatela.edu"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/solttitll098/upgrade/thenewgenautoindex.html#susanjohnson02020@yahoo.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/sqlseiceteroeswalesuserw.appspot.com/index.html?dd9uj&amp\;rip=1&amp\;nojavascript=1&amp\;ifkv=au9nccwgqgxybveyj_rmt1ijh5qqlfd7xhs9ssn0ocwja5n3jm1gnfvdcuhslngz3y67_oax8ufr&amp\;followup=https://storage.cloud.google.com/sqlseiceteroeswalesuserw.appspot.com/index.html?dd9uj&amp\;service=cds"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/staging.maintainancecomponeta.appspot.com/fcocnew.html"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/staging.maintainancecomponeta.appspot.com/nvhdjgtpl8txagtoccpyscuekxctc7j3kpg5bbugwqv0kemeas313lqehufuifcl6el9vtvomhrfbjbpxbg6qrnsg5sz3dyaiqor%2c%2520ffx6khej2lavfftroaizcq99hjdn3f4hs6gdeg2qodfyhobl8zonx6lez2dafyafc6spylufytfvuzn1jsioh4u6xpsbsqxqgh.html#icann@tecnocratica.net"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/staging.maintainancecomponeta.appspot.com/sydlasgendomain.html#winnie@soupro.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/tilittjkilot/kakaaautoindex.html#a@b.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ttn5/raja.html#a@b.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ttn5/raja.html#william@nabaza.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ttn5/raja2.html#a@b.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ttn5/udunwa.html"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/user517497679326978.appspot.com/index.html"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/uth0uax3t3uh30ttna0nnuser.appspot.com/index.html#jbell@legalshield.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/yyw77ywnn68weyew6euserq.appspot.com/index.html#rosalefua@legalshield.com"; http_uri; nocase; content:"storage.cloud.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1234_off/767566757676.htm"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1234_off/767566757676.htm#accounts@centrica.com"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1827435283/1827435283.html"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/anjumaa0059.appspot.com/indsadadex.html"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/anjumaa0059.appspot.com/indsadadex.html#alfredo@tecnocratica.net"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bbss-urltest-public/docomo_20210726_01.html"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bbss-urltest-public/docomo_20210910_01.html"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/inboxino/brand.html#cl/13669_md/1/788/1401/22/1025434"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/inboxino/brand.html#cl/13695_md/1/788/1401/109/376564"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/inboxino/brand.html#un/13664_md/1/455/1401/112/814109"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/inboxino/brand.html#un/13695_md/1/788/1401/25/339407"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/inboxino/linkqs.html#cl/29040_md/1/4631/3798/112/984664"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/inboxino/linkqs.html#cl/32440_md/1/4628/3798/112/984664"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/inboxino/linkqs.html#cl/32621_md/1/4628/3798/112/984664"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/inboxino/linkqs.html#oop/29237_md/1/4629/3798/112/984664"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/inboxino/linkqs.html#oop/29627_md/1/4629/3798/112/984664"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/kekvmftbijqr/qarqoiskwcbx.html#ezacvbnkpm?cbbbbcccs2ptcxvckcdcc5csc3pjpckzfcbbbbc"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/newuserlpo/index.html"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/onlineupdate/vendors/to2.htm"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/pemotion/tixrin.html#/ytk3zstywfhgqtrevnj2amjnsuj2y01athbtukdvaxvdl2faem9wk0c5befnwerjm3rgqnbnzuxqwxk5c3hvuexjd1zud0twm0r0wk4xukltzutwdwvrakx1zwfdbfm5eeirwvgzdjlovg89"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/reaganstarkyjs/fqh9haa.html#tizioebsr.6x4ivkd4em5v9fgqt?f1tdqwcc4vybcxfhvcdcnvcyc45jphdc7cbbb4p"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200070999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/srvrs-quarantine-update.appspot.com/index.html?email="; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/sstoragert/linkqs.html#cl/19939_md/1/4441/3808/112/984664"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/sstoragert/linkqs.html#un/19995_md/1/4542/3682/112/984664"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/teampass/ha231120/hrf2zsdf/newb.html#2243022fe5715752yo615523864ez9739qk24hnr139714jz"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/uvyzcsiggb.appspot.com/pduqg.html"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wjscsfikph.appspot.com/twava.html"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/yzunkghsds.appspot.com/rdldj.html"; http_uri; nocase; content:"storage.googleapis.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/008009aa-0c78-42dc-a70d-c23181f54038-bucket/validatesession19/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/008009aa-0c78-42dc-a70d-c23181f54038-bucket/validatesession20/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/008009aa-0c78-42dc-a70d-c23181f54038-bucket/validatesession21/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/008009aa-0c78-42dc-a70d-c23181f54038-bucket/validatesession22/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/008009aa-0c78-42dc-a70d-c23181f54038-bucket/validatesession22/index.html#corinne@zilch.nl"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/008009aa-0c78-42dc-a70d-c23181f54038-bucket/validatesession23/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/008009aa-0c78-42dc-a70d-c23181f54038-bucket/validatesession24/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0177864e-4da0-4800-a2c4-f93668620715-bucket/indexx.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/01f76bf7-0eb3-4369-9090-721bb41e29e3-bucket/xxxxxgwui16iasm/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/02416b2d-e521-48e0-9d61-d6495062cb37-bucket/steps1/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/02416b2d-e521-48e0-9d61-d6495062cb37-bucket/steps2/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/02416b2d-e521-48e0-9d61-d6495062cb37-bucket/steps3/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/02416b2d-e521-48e0-9d61-d6495062cb37-bucket/steps4/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/02416b2d-e521-48e0-9d61-d6495062cb37-bucket/steps5/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/02828cfa-e421-4462-9568-7a45f46fa5fe-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/02b7078c-aae5-4178-b273-92c7a81011fa-bucket/hol/index%20(3)%20(1).html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/02e32dae-2d4c-432f-bab5-e95d0db36172-bucket/rfq11012.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0347a193-3509-4f84-9eb8-8c7aa3c40ba3-bucket/5/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/03a756b1-41a1-44cd-8023-0feaf0c9e8b2-bucket/indexx.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/03d449d6-b735-4e8e-abc3-80154715a313-bucket/03/index%20(2)%20(2).html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0409a696-b63e-459f-adeb-d40c1684afed-bucket/officeonedrivehtml.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/04c2ccc6-e513-4cbf-a7b9-851ccc799bd3-bucket/index01.htm?ioxwrxnaerll&auth=&7589cf-3ac6-4e1c-9e2a-babd0161c3c4&utm_source=mail&utm_campaign=&utm_medium=u=589a0449d04476c8af0f92bc7&amp\;id=ca92440317&amp\;e=c5cec25e50bgvtwazsqmmcal3zbjzlz2tjr&amp"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0504b889-4afb-4710-8257-9edf5e72bd14-bucket/fileofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/05981031-f824-429b-a0ab-1bd92d3185ca-bucket/indexx.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/05ca6e42-0651-4c81-8d99-25a5a15f73cc-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/05d07142-ed07-4096-9a5a-22b46343a8d2-bucket/continue.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/05f20de3-6d8c-4ad0-b831-6e19bed67032-bucket/mailchecking2/ljhfzzjkvptkjbhwjfvfhvcwmjmqnvzctkjwqntmdjnjzjltvxbdwxgpfnnhtqgvhskzhr(1).html#security-team@ionos.co.uk"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/067877c8-c5ac-4ef2-bbcf-f943156ed95e-bucket/de/adobe.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/067877c8-c5ac-4ef2-bbcf-f943156ed95e-bucket/we/adobe.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/073f0681-64f1-4f27-9986-a7cbcb285e97-bucket/servermail1/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/073f0681-64f1-4f27-9986-a7cbcb285e97-bucket/servermail2/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/073f0681-64f1-4f27-9986-a7cbcb285e97-bucket/servermail3/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/073f0681-64f1-4f27-9986-a7cbcb285e97-bucket/servermail4/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/073f0681-64f1-4f27-9986-a7cbcb285e97-bucket/servermail5/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0771bbd6-b2f1-4455-accf-fd245f560726-bucket/94fr30dm34ew3.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/07728cf5-1dd4-466c-af6f-e4bf1f9e4693-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/079e1823-030b-41c0-8512-023193c0c7ce-bucket/owaa.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/07c4251a-c257-4926-b3c2-0ed73624b5e3-bucket/fileofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0820e856-09f6-4bfb-ab07-0af1ff852557-bucket/newnewofcc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/085b9b78-0ab2-44d7-9e89-f616947a8290-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/087b6283-aa2e-4ff2-bcaa-e9e7e922b694-bucket/meet1/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/087b6283-aa2e-4ff2-bcaa-e9e7e922b694-bucket/meet2/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/087b6283-aa2e-4ff2-bcaa-e9e7e922b694-bucket/meet3/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/087b6283-aa2e-4ff2-bcaa-e9e7e922b694-bucket/meet4/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/087b6283-aa2e-4ff2-bcaa-e9e7e922b694-bucket/meet5/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0891749f-909e-4267-9438-457e22431647-bucket/grace1/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0891749f-909e-4267-9438-457e22431647-bucket/grace2/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0891749f-909e-4267-9438-457e22431647-bucket/grace3/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0891749f-909e-4267-9438-457e22431647-bucket/grace4/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0891749f-909e-4267-9438-457e22431647-bucket/grace5/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/08be268c-5ec9-4721-99e0-0082019a642b-bucket/cathie/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/090a7e04-2e55-4b10-8b0f-e73fe122fe24-bucket/mailing/mine%20webmail.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/09380f13-ffb4-4157-af2d-193b1a8c105e-bucket/regime/voicenotice.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/096593ac-2eca-4a4f-80f0-5daab89ec1f3-bucket/proj.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0a075dc0-d303-41ce-ab00-570639b6782d-bucket/sistelec0fintex/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0a075dc0-d303-41ce-ab00-570639b6782d-bucket/voip-telec0munidsgxe/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0a39a5ba-dba3-4fb5-bff3-5e73de94c728-bucket/12xxvcv/0a39a5ba-dba3-4fb5-bff3-5e73de94c728/0a39a5ba-dba3-4fb5-bff3-5e73de94c728/0a39a5ba-dba3-4fb5-bff3-5e73de94c728/0a39a5ba-dba3-4fb5-bff3-5e73de94c728/0a39a5ba-dba3-4fb5-bff3-5e73de94c728/0a39a5ba-dba3-4fb5-bff3-5e73de94c728/0a39a5ba-dba3-4fb5-bff3-5e73de94c728/0a39a5ba-dba3-4fb5-bff3-5e73de94c728/uxb.htm"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0a39a5ba-dba3-4fb5-bff3-5e73de94c728-bucket/fredbox/taramfred/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0aa2b36d-82d6-4b7a-9e41-82ae412bcd60-bucket/achatcomptabilitedelarouge/confidential.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0b4126b5-bbd3-4b45-b0ae-f1b78fe697e0-bucket/index%20(2).html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0c0a62dc-4401-49af-bfa1-511cf49cffd4-bucket/linkeen.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0c9132ec-9643-4af4-8c51-078fb5efab0f-bucket/invc0201.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0d0e71d5-7ee4-46ff-9702-90af25bbefa3-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0dc03a6b-3744-44a2-b282-51870f80df31-bucket/maccyytt/beta1.html?email="; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0dc03a6b-3744-44a2-b282-51870f80df31-bucket/maccyytt/beta8.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0dc03a6b-3744-44a2-b282-51870f80df31-bucket/maccyytt/beta8.html?email"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0dc3c1d9-f66a-4170-9960-69facae4c688-bucket/qen.html#x@x.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0ddc31c7-7b8d-4d33-b6c0-1d83550f6ca9-bucket/mran/wnd.htm"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0e9ce646-3094-4f78-a613-d02a16ccb7dc-bucket/webmail.htm"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0efa7289-3017-49c5-b61c-37de532340b8-bucket/owa/adobe.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0ff4cc32-f859-4a44-a78c-0e9d7980824f-bucket/webmail.htm"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1000e057-888f-4e29-9037-15c4e7bd4539-bucket/host/safe.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/10640a04-0cc7-4ecd-939b-bf679d81f77f-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1107b13b-95f8-4607-bcbf-855c4216c44f-bucket/sino-rich_securities_&_futures_limited.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/11c7a482-6ca6-4dfd-b2e8-6acaa0363a9f-bucket/generalpage/upgrade/upgradelive/generalpage/cryptautoupgrade.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/12807595-4e3e-441d-8be7-c8d96073ef60-bucket/export.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/12876e87-eb0f-4f82-bde2-8ee0148e9312-bucket/lis/tim.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1344327c-237e-4837-b03c-0a2821ccb49d-bucket/2/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/14a2f715-cb61-421c-a1c7-966bcb291f16-bucket/indexx.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/14e8eb22-d4a9-4105-85d8-08261460a270-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1547eea2-6309-4177-9176-edeb6351a5b4-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/15a4d60d-9bfd-40ad-8b5f-d3bd7a38d88a-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/15e2454f-4788-4252-a7e7-bf692eadc5f0-bucket/valses/index(12).html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/16e0b4f4-097c-40cc-b6db-9e2230970ca5-bucket/dimi.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/16e819d5-ff2e-4325-9cfd-085c421bda1c-bucket/fileofc%20(1).html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/170e9994-ea3e-4dfa-a388-34c3af1ab2d5-bucket/hon/irs.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/17294928-d2c0-4733-95fb-9edc39870f4d-bucket/keepnow.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1730ad2e-b5ea-4199-9ef5-016339155306-bucket/indexl.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/17841cbb-7f9a-40ad-a1aa-1667c7c1d5ba-bucket/mailingserdomain1/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/17841cbb-7f9a-40ad-a1aa-1667c7c1d5ba-bucket/mailingserdomain2/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/17841cbb-7f9a-40ad-a1aa-1667c7c1d5ba-bucket/mailingserdomain3/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/17841cbb-7f9a-40ad-a1aa-1667c7c1d5ba-bucket/mailingserdomain4/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/17841cbb-7f9a-40ad-a1aa-1667c7c1d5ba-bucket/mailingserdomain5/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/17de5cd0-3f3a-4d74-9f28-d7be7a83aabd-bucket/structor/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1804cab7-7346-499d-996a-364edd5ba513-bucket/newrenew.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/181de746-2332-47d5-a758-05b50160f848-bucket/indexx.htm?"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/18611b3f-086f-4e39-87ce-5a1676786a71-bucket/qen.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1872cf38-9eb1-4536-8498-daf3d464769c-bucket/indexx.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/18e74947-7f50-450e-b0f6-c66aad00fe1f-bucket/fileofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/18f11056-0746-4859-a59b-65e7cb150f5a-bucket/mails.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/19dc4686-e35a-4003-8b63-52c851d46816-bucket/paiement/mattt.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1a7b6f5a-93f9-4998-817e-6e6cbe2885ec-bucket/clear.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1a8fd766-4d5e-461e-8bfc-c728f7651d00-bucket/zamule/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1ab8f448-3206-48e9-9de6-79e12f8686d5-bucket/o/adobe.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1abe1479-8077-49b0-a930-0a5ed993a2c0-bucket/007/blackie.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1ad8dec7-46ca-4414-aad2-d40b9d393bd6-bucket/dd9/index.html#tanaka@kohyo.nl"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1b9e483c-a62d-4eca-a1ed-d419a6b5e29a-bucket/indexx.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1bbbc27d-bf8a-44b4-87a0-59c7a75cf17f-bucket/qaz/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1bce33d9-6784-4aa1-9e63-2acb78c75fc3-bucket/verify/english.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1c20489e-d757-45a8-83ed-6231dbca099b-bucket/in2foodaustralia%20document%20folder/scanned%20storage.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1c284037-35fe-4204-a481-35e154931c10-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1c305fcb-7d3a-44d9-9fd2-50595a13e210-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1c4f5365-9747-4b0e-90bb-23f5e391849c-bucket/365slink.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1ceb991f-05a7-405f-b836-db6562a83c81-bucket/messaging-wetransfer/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1d912b44-1c41-4688-8a21-b749fbb550e7-bucket/way.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1e42a772-d186-441f-868e-81f2fde0cf03-bucket/gadget.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1f1e4f79-344e-4a27-9c9e-ca9edc1c8013-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1f99f6e8-b312-4d07-a961-367dc9f894f1-bucket/index-us%20-%20enc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1fe526bb-5b83-4613-8376-b6e16c8c0a2f-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/203846b8-8514-42ec-894c-b9724cd25a35-bucket/ed56t/evgv.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/20c90f64-dc99-4197-b39c-98635a734053-bucket/paiment/mattt.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/211455fe-1dfe-43f2-9017-195be4bac7f9-bucket/dential/mozla.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/21984009-480a-464f-b136-d3db9c17c979-bucket/offleek.htm"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/21f47783-d8b0-4f30-8bbb-25425bad40dc-bucket/clear.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2200d9f4-37d0-416c-83fa-4eabd473372a-bucket/mainx.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/222ce18e-dff2-46c2-a40f-d50c1f9c9a59-bucket/upgrade/website/update/upgradewebsite/esnowwebsiteupgrade.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/22533933-4ba9-40b8-bf76-a822fb2028cc-bucket/one/view%20doc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/22b5ad07-22d8-4137-a753-eed64883b182-bucket/overlay1/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/22b5ad07-22d8-4137-a753-eed64883b182-bucket/overlay2/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/22b5ad07-22d8-4137-a753-eed64883b182-bucket/overlay3/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/22b5ad07-22d8-4137-a753-eed64883b182-bucket/overlay4/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/22b5ad07-22d8-4137-a753-eed64883b182-bucket/overlay5/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/23a45a7b-21d5-43e1-8dcd-acf81abec49e-bucket/papybuggy/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/23f09e89-1c78-459a-9d36-e2f4f499f9e7-bucket/newsfcs.htm"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/23f0cfe6-22d9-48d3-82cc-960f0dd6e7af-bucket/page%20new.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/26b70f79-45a8-4524-838e-5821eed143a2-bucket/3/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/27833221-1b3d-4f79-a4f8-dd056b8cf68a-bucket/nv/doc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/285f7531-42c7-41e4-b74b-cbcfba3d4563-bucket/joi/pag.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/28a32247-c609-49d2-8aa0-3169aaf59b2e-bucket/server%20(1).html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/28b92292-b3a3-4fc5-8f8e-0126dba82ee9-bucket/ggenn.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2a6314f1-1972-414d-b15b-6789e36e84c4-bucket/scriptt.htm"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2aab58e5-27bb-477c-bc97-ae4e528071ac-bucket/brozil/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2ab0f46e-8408-4f1a-8c0a-3d66e8b7c285-bucket/index%20(3).html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2b3bd2a5-71f1-4836-955a-9875f0c4e459-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2b3d723e-95dc-438e-9cc8-454e67de81c4-bucket/cod/tim.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2be46cf3-38c7-4fe4-8523-6f8d0ea7934a-bucket/files-folder.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2dbaa769-b069-4667-8061-f79625d873e4-bucket/newnewofc.html?websrc=otv151gjyqoimbcldgbfu6pxk0cf3xfassopmlp46vagp7ivd8yfibenice8jgzm91rgxzc7j8hvfplzqurgutrklk9mcpqplwvr8wm6d1ezjpmh3cxbmhhwtnj1tl8tvkrtapy34kgyjfzpurturccyc2qkvssjhmohzbo1y2hcxfljj0xdbjcguohebtn2rzjbheg9in7gmmwkwqticmsuovnl6lvsnvau0fsrzwtbvveb8yx9ghzatk2in9wiv1oq6uakfafyxad5ovgzub8h3xu0efx6y8mjyzbccbfnvw&dispatch=783&id=794595"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2de8538b-36c1-4a81-962b-efd465fad6e6-bucket/access/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2ec9db52-41a4-4bb3-b073-3a67d64aab20-bucket/van1/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2ec9db52-41a4-4bb3-b073-3a67d64aab20-bucket/van1/index.html#phishing@irs.gov"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2ec9db52-41a4-4bb3-b073-3a67d64aab20-bucket/van10/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2ec9db52-41a4-4bb3-b073-3a67d64aab20-bucket/van2/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2ec9db52-41a4-4bb3-b073-3a67d64aab20-bucket/van3/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2ec9db52-41a4-4bb3-b073-3a67d64aab20-bucket/van4/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2ec9db52-41a4-4bb3-b073-3a67d64aab20-bucket/van5/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2ec9db52-41a4-4bb3-b073-3a67d64aab20-bucket/van6/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2ec9db52-41a4-4bb3-b073-3a67d64aab20-bucket/van7/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2ec9db52-41a4-4bb3-b073-3a67d64aab20-bucket/van8/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2ec9db52-41a4-4bb3-b073-3a67d64aab20-bucket/van9/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2f2e988a-b3c7-40d5-ac83-088b1bef53c3-bucket/a/cos.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2f974e13-9809-4b6c-8ffd-51f81fd533e1-bucket/ee/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2f974e13-9809-4b6c-8ffd-51f81fd533e1-bucket/ff/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2fc65574-35ee-42cf-8fce-3abd5b7b010c-bucket/ours.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/30001fbf-a421-4772-86aa-80060b39d69f-bucket/indexx.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3064bfa1-7b0a-4aa7-9b99-f0d801bdbe13-bucket/messagingfiles/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/30978755-8ac2-466d-8377-dd37924d95b3-bucket/inboxss.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/30c23b41-13ea-4da2-8b36-98a4bb71d648-bucket/srue.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/314af2d5-1149-40ea-98fb-52176db586b7-bucket/webmail.htm"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/314af2d5-1149-40ea-98fb-52176db586b7-bucket/webmail.htm#x@x.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/32728d35-9c8f-48e9-a7de-5b79b7e9fb73-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3347ec1f-277f-47eb-b286-cfb21b70479f-bucket/office365.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/34e2727e-cc91-4458-a41b-7bfba9c737aa-bucket/tim.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3650117d-ce58-4884-9211-8cf2b3862d5b-bucket/wetransfer/wetrans/ewetransfer/ewetranfer.html?err=5hxute5mjkkp0nhqsci&dispatch=aac&id=a83cb8c4743b3b7a8c4bc35b699501"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3654aba8-0adc-4611-8379-6d15b29cbb66-bucket/nscript.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3669c475-283c-4578-9196-9aea39a11aa4-bucket/01/puf.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/379164c0-ba21-4cb5-9c8c-51461c481d6b-bucket/office.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/379164c0-ba21-4cb5-9c8c-51461c481d6b-bucket/onedrive.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/38418bd9-a834-4b80-ae34-4c664ebc819e-bucket/amt/index(1).html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/38545e9c-ef6d-49be-9574-6d1f62ccf7c6-bucket/fileofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3990148d-98de-4a9d-9961-4d5fda2ff674-bucket/9435522.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3a676bb3-d219-4e36-9d2a-d27b6d9445e8-bucket/jebssupporteditemslogs.htm"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3a676bb3-d219-4e36-9d2a-d27b6d9445e8-bucket/suppourtgroupkentenwebmailselo.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3a676bb3-d219-4e36-9d2a-d27b6d9445e8-bucket/suppourtgroupkentenwebmailselo.html#cert@cert.uy"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3a6ea15a-585f-4859-a754-100e256992d1-bucket/jhy/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3a95f8a4-7482-4cdb-86bb-d48fa9dee577-bucket/can.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3abf5106-57a7-45c9-a8fc-13baa44e803e-bucket/indexx.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3abfd30b-1c83-46d5-b131-46685cff1be6-bucket/micro365.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3abfd30b-1c83-46d5-b131-46685cff1be6-bucket/receipt-cache.html?rmxv=1669042019"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3c2fb691-0695-4cda-944d-5eecde7f7920-bucket/office/login.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3d20107d-a0ab-454d-b952-f0cc43872720-bucket/servermailing10/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3d20107d-a0ab-454d-b952-f0cc43872720-bucket/servermailing6/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3d20107d-a0ab-454d-b952-f0cc43872720-bucket/servermailing7/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3d20107d-a0ab-454d-b952-f0cc43872720-bucket/servermailing8/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3d20107d-a0ab-454d-b952-f0cc43872720-bucket/servermailing9/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3d50c757-8d4d-4aee-b372-3d113175e220-bucket/oiu/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3ebe4162-51a1-4b9c-86fc-e6fa80e7f837-bucket/payment/index%2812%29.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3f9b2dd1-e15a-40e9-ae2b-15bf8d627037-bucket/fileofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3fd3fb69-0da3-4506-9657-dd03c2e51564-bucket/inbox.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/40bed425-0d9e-4c62-bb8f-9c413d2d7aa8-bucket/rfq11012.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/41678af8-27d1-422b-8237-6c7989107312-bucket/ttttttttt/index.htm"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/418def22-1026-448b-b2fd-2f7fd0435acf-bucket/indexx.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/41cbd21c-2ad8-42e2-809b-25d3b9490345-bucket/de-administrativemanagement-accessingsupports/processing.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/42a4267a-0383-4b52-89b9-58ba05708e50-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/42d21783-72c7-4af3-83f1-2d38745b8129-bucket/above/index.html#adsf@asdf.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/43b897b1-a1b4-4c47-910a-9373f5551f6f-bucket/sharepoint/onlinefileshare.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/43f69713-d821-4c25-8363-673b90aee7dd-bucket/32323/testowa.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/44104130-81a0-4eb5-bb14-ed974f61fb47-bucket/myoff.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/459518fb-8d2b-4356-912a-b57525b246c6-bucket/odere.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/459518fb-8d2b-4356-912a-b57525b246c6-bucket/odere.html?email=#jomama@fbi.gov"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/45f08fe8-ef6b-4fd2-8495-507532e9e013-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/464b9ea8-ef3b-4f35-ba0b-afe898e62d45-bucket/fileofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/46a340d8-776f-4baf-9771-a39890174b79-bucket/shipmentnotice/index.html#x@x.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/48df6d15-56d8-4977-81fd-0236f264a5eb-bucket/a-ionos/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/48df6d15-56d8-4977-81fd-0236f264a5eb-bucket/s-ionos/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/49312171-692a-4a07-8b8c-299a003f5a99-bucket/af%20ahern/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4a001674-2cab-458b-8e55-192759c0f380-bucket/fileofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4a371fa2-a0c4-48a6-b1da-cd59991f136a-bucket/auth.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4a8b7ef4-fb1c-47ce-b4a7-a6f57f92bce7-bucket/offleek.htm"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4a8b7ef4-fb1c-47ce-b4a7-a6f57f92bce7-bucket/offleek.htm?email="; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4aa2534d-51fa-4b73-b4a9-5ff77f790ebd-bucket/draging5/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4b2fe6c2-45be-40ff-bb61-3fc0558c5527-bucket/doc.0/txx.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4b2fe6c2-45be-40ff-bb61-3fc0558c5527-bucket/doc.1/file.0.1.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4b2fe6c2-45be-40ff-bb61-3fc0558c5527-bucket/filee/filee.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4ce09e3d-fef7-420d-8e23-31b2b402bebc-bucket/3rfcdefred.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4d291858-3983-4e4f-b98b-c1bde34b0e60-bucket/pw/index.html.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4d291858-3983-4e4f-b98b-c1bde34b0e60-bucket/pw/index.html.html#abuse@ethz.ch"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4d291858-3983-4e4f-b98b-c1bde34b0e60-bucket/svrupgrade/index.html.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4d8ddbc3-7ece-4cee-bacc-fc98db486b55-bucket/h/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4dbe0f33-2cbd-4814-98c7-2ab7a391be60-bucket/bou/tim.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4df9f8c6-4f96-4ae5-a9bb-82e51d2a9d9f-bucket/offer_rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4e0b865b-6391-42e2-9a64-5efbdc5bc386-bucket/verificationmailcheck39/indexdns.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4e278dff-cd35-48bb-9055-5184a3699907-bucket/lion.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4e364da8-04af-4181-a84d-22e5756ff6c7-bucket/jmzg0nguzlwqwmjqtndjhzi1hndywlwmxyjm4zji.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4f41c94f-3e02-4423-81f5-93af46730a1f-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4f5a8675-32a1-4ce6-b40d-63b13403ac1a-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4f81cad3-08b8-4797-b394-8251395eaae8-bucket/offi.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5027178d-fc28-4b8c-adca-a9abe8ae8ad1-bucket/nicerr.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/509e8260-e3cb-4cdd-bdea-1dbfe439e184-bucket/frc-18963bc27412.html#ripe@nameshield.net"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/517b2eab-211b-467f-ada0-3ec832efea9d-bucket/k6tb/indexe.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/51db2b99-b69c-4732-80cc-b4c469fc72ea-bucket/cul/smoth.htm"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/52663812-784b-4e1a-b4a0-2b64fbab4850-bucket/new.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/52a20491-52b3-4341-bbd8-cc274a4b1eee-bucket/box.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/52d36baa-e745-4841-92e3-f34e9c9df49c-bucket/ihjihi/login.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/53205beb-e9f1-4cdc-88ad-5732e17b1dd0-bucket/emailserver6/index1.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/53205beb-e9f1-4cdc-88ad-5732e17b1dd0-bucket/emailserver8/index4.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/53205beb-e9f1-4cdc-88ad-5732e17b1dd0-bucket/emailserver8/index4.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/53205beb-e9f1-4cdc-88ad-5732e17b1dd0-bucket/emailserver8/index4.html#username@domainname.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5394a850-449b-4035-a683-49feda2acf1e-bucket/payment/adob.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/53d2d7ab-b807-4a35-8a62-7fef0c55719b-bucket/new%20dhl%20invoice.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/54145e60-be61-44bf-a465-5be604c5fc57-bucket/officestorage/login.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/54829f8c-054e-42e6-b159-6511046746e0-bucket/fileofc%20(1).html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/54f2e839-d862-480d-9c0f-f130c0fc7d01-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/551adfdd-e603-42af-92aa-10b9ea17b71f-bucket/verificationmailcheck13/indexdns.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/551adfdd-e603-42af-92aa-10b9ea17b71f-bucket/verificationmailcheck14/indexdns.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/551adfdd-e603-42af-92aa-10b9ea17b71f-bucket/verificationmailcheck15/indexdns.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/551adfdd-e603-42af-92aa-10b9ea17b71f-bucket/verificationmailcheck16/indexdns.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/551adfdd-e603-42af-92aa-10b9ea17b71f-bucket/verificationmailcheck17/indexdns.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/551adfdd-e603-42af-92aa-10b9ea17b71f-bucket/verificationmailcheck18/indexdns.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/56261e77-9ba3-49fb-9f57-11c14aea3fde-bucket/renwe.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/56833382-ae0c-4d1d-9614-4307406d1067-bucket/download%20pdf%20attachment.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/56c4950e-b9f0-435b-83d2-2e5872095543-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/57c85b2d-e340-46c0-9419-4228856c624d-bucket/ofdd.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/57d0a499-7932-4022-b2af-1d262ebfe6ca-bucket/uslk/dr0pf1leupdatesabsnew.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/58a29414-dac1-4f44-b09d-a6b351e56199-bucket/rfq11012.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/58a9d810-4566-4174-910a-8274c0ca5156-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/58d4908c-793b-4b7c-a88c-8f1c7d7d5523-bucket/vrfpage/vrfportal.html#orders@kohyo.nl"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/58d9cb92-a511-4227-836b-a45fefcd7b6c-bucket/clippas.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5934003b-56a1-45d2-b13f-a3f2deb60082-bucket/offleek.htm"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/594ae299-05ea-4930-b9e5-c5342625ca4a-bucket/11777/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/594ae299-05ea-4930-b9e5-c5342625ca4a-bucket/11999/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/59baaf79-b41b-409d-ba7c-f4acaeaa8a24-bucket/domainmailserver2/index2.html#x@x.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5abfec3f-8268-425b-b605-4003b70145cb-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5bb11ec4-a29d-4df7-ad5b-3f9f44bf459d-bucket/ind3x.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5c735fd0-ec45-425f-9529-cf56e1fedac0-bucket/tgb/dr0pf1leupdatesabsnew.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5c962aa3-4ac8-4845-b47f-3e535df71e7c-bucket/boot1/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5c962aa3-4ac8-4845-b47f-3e535df71e7c-bucket/boot2/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5c962aa3-4ac8-4845-b47f-3e535df71e7c-bucket/boot3/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5c962aa3-4ac8-4845-b47f-3e535df71e7c-bucket/boot4/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5c962aa3-4ac8-4845-b47f-3e535df71e7c-bucket/boot5/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5cb163da-f1bb-4c1b-a8e9-14695e01f82e-bucket/fileofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5cc3e769-b466-4566-b92c-9fe1e9270198-bucket/papy.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5d0536d2-0dbd-4f65-bdf2-5478410c96ef-bucket/indexs%20(8).html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5d1ed968-478b-4b9b-b3e6-122f873801b9-bucket/mar32l/zimbra.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5da1f541-2b7c-45f5-bb8f-7608db26980d-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5daf191e-7f85-42a6-aedd-51080bc0fa56-bucket/io.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5db70928-77d3-4fc2-9ec0-3e0884c6e755-bucket/wbmindx.html?rmxv=1669131268"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5dccdcb9-a76a-423b-8109-b4923299ea78-bucket/talbrt/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5ddbbbed-4fcb-48ad-82a2-ab090857164f-bucket/cre/lank.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5e96c597-88aa-492f-8508-66d287ce9053-bucket/mailerror.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6013b629-6f89-4b06-8cd4-18564bf7ea29-bucket/contx.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/60262110-3cae-4646-ade9-887cd5639d84-bucket/csh/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/604b66e9-6295-4884-97eb-e6734c0e5c0e-bucket/fileofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6073e229-c758-4210-a742-257a8477b7a7-bucket/!&amp\;()0.paw.$!&amp\;!&amp\;.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6073e229-c758-4210-a742-257a8477b7a7-bucket/$!).a.m.0.$!&amp\;&amp\;!&amp\;.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/60816a76-00be-439d-a9a8-e0b2b0bf648b-bucket/4/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/610f6d2e-ecaa-4941-af50-2adb785c4650-bucket/soft.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/612b82fb-6074-4596-b922-4b43f3314ef7-bucket/dhl/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/61480a35-422f-4cc7-b58c-f487bc6c5b65-bucket/securesecure/hfjjfkvkd.htm"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/61480a35-422f-4cc7-b58c-f487bc6c5b65-bucket/uwmdhdf.shtm"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/61deb6d7-0f39-4b5c-be7d-b3d5c7279b8b-bucket/cssps/securedf.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/626f2e42-3345-42ef-b584-0e1d1f19bbaf-bucket/cards/dr0pf1leupdatesabsnew.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6279f280-0f68-4793-90d2-ffa900c17291-bucket/share%20%282%29.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/62ac7c12-f24c-43d1-b3a1-581162f4c42e-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6373bacd-1a08-41cc-9df3-1438ae5e87f0-bucket/indexglx.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6382ea8e-bed0-4a80-8167-117c945bde45-bucket/pa/newpage.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/63c007fd-0d4f-4d49-a221-34f978ef5fb7-bucket/x/x.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/63e3d9b6-39e8-44f5-8f71-bd9064380a09-bucket/tf/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6451367a-571a-418a-b0a6-c473c154c8d1-bucket/hac/dr0pf1leupdatesabsnew.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/648d03ef-0b94-494f-824d-f1c768eeb80b-bucket/file/portal-1.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/648d03ef-0b94-494f-824d-f1c768eeb80b-bucket/xxa/portal-1.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/64b61f2d-d14f-44e5-b36d-85f878758f5a-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/64fa4403-d6e0-427a-9a3c-5889dbd8c760-bucket/sam/index2.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/651c5d2b-159c-4e3c-8558-c24132b84178-bucket/papillon/tim.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6597ef45-3465-4385-8f83-e72d72d21dc3-bucket/cc57dhm/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/65d6137a-aa68-4f10-9b8d-3763e277f165-bucket/lo/indexxxxxx.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/65dbb473-51c0-4bcf-9a87-99b7110c0818-bucket/gmx-login.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/66096d55-0650-4645-b1f6-d85fb3e0ad75-bucket/dddd.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/66096d55-0650-4645-b1f6-d85fb3e0ad75-bucket/dee.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/66739653-6c38-4ca8-a984-d1faf9a7ea9f-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/66841213-dfc3-442c-9531-d52f536d3e28-bucket/saved.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/67b3d623-1861-4fa8-89e9-cebd50c08a3d-bucket/bent.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/67b3d623-1861-4fa8-89e9-cebd50c08a3d-bucket/proceed-.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/683fd3b5-c285-4108-a825-5c9e3525b949-bucket/indexs%20(8).html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/687356ea-9d2d-40ca-b3ab-3130f967beab-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/68acccb4-2623-41f6-aca1-56ea8f2a488d-bucket/saved.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/693dd0c0-4f0d-482d-949b-b41c5314a1b3-bucket/mail/index.html?=#noc@cloudflare.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/69bfe8cb-0bb4-436b-aaae-951ceb561f1b-bucket/sso/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6acb3647-1d42-46c9-ab36-0ae7631e5389-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6ad717a5-dc3a-4833-9e6d-ed6c50cd9aa3-bucket/04/olori.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6b107d26-4a09-45a0-b442-7cf8e215b79f-bucket/fileofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6b1e919f-20bf-4f29-8357-6f39e7d5f17f-bucket/rfq11012.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6b597d75-db6f-4b16-a4f9-2f0f45f1b9c4-bucket/verificationmailcheck25/indexdns.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6b597d75-db6f-4b16-a4f9-2f0f45f1b9c4-bucket/verificationmailcheck26/indexdns.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6b597d75-db6f-4b16-a4f9-2f0f45f1b9c4-bucket/verificationmailcheck27/indexdns.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6b597d75-db6f-4b16-a4f9-2f0f45f1b9c4-bucket/verificationmailcheck28/indexdns.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6b597d75-db6f-4b16-a4f9-2f0f45f1b9c4-bucket/verificationmailcheck29/indexdns.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6b597d75-db6f-4b16-a4f9-2f0f45f1b9c4-bucket/verificationmailcheck30/indexdns.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6bb16471-d5f3-4b20-af89-f0ea269e2232-bucket/indexx.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6bb6bbcc-46fa-4fee-a7cb-a30e8e0c1cd6-bucket/einns.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6c4453b5-2a3e-4389-95a7-7c130d2231fd-bucket/jokiihj1.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6c665465-635d-4d58-ae09-0d09efe5652c-bucket/b2ks/oct25/octagons.html#ss%xx.ch"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6dba7d61-89b8-4890-a060-ad0f0d599547-bucket/skalepoint/purchaseorder.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6dc2fb03-d750-4f8b-91a4-e4201aaad9cc-bucket/o/comptableom.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6e2895b0-b35d-41bb-96ef-a36b383f6580-bucket/cp/index%20(4).html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6e39535e-d3a3-47b6-8684-7a129fe27cea-bucket/qmd/index%20(18).html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6e63baa8-8023-45f9-a747-0aadfc5f7575-bucket/fileofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071352; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6f96757c-128d-4ac2-9628-99eaceb890b0-bucket/access.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071353; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6fb54de1-0ac2-4845-b632-3431d9f3bc49-bucket/updatedomain13/index1.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071354; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6fb54de1-0ac2-4845-b632-3431d9f3bc49-bucket/updatedomain14/index4.html#user@domainname.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071355; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/706aadc4-306f-4644-9ffb-982a14abc4cf-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071356; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/70b1299a-8d76-4da1-82fb-4d1cf8ed10c6-bucket/wiko-file/encrypted%20file.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071357; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/71754094-95ff-4191-b94c-e95b642b42bf-bucket/upgrde.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071358; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7199a3c8-6999-4bcf-ab21-df4f03a355f8-bucket/wins.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071359; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/73764aa4-36f4-451c-ac26-d45e25726a8b-bucket/creditstatement/newindexphpg.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071360; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/74e9b570-cf9f-43b3-a8e2-6a9cbfb0b42f-bucket/iuy/rtex.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071361; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/756463f1-d70c-497e-a6e5-8dff84152d1b-bucket/sharedfilecreativeprocessunderprojectaliasconcretefacilityunderscore/pdfff.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071362; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/76531d31-6c0d-4779-8593-132667a81515-bucket/fileofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071363; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/775b360c-eb23-4eb4-8661-3f596d2c0b85-bucket/verificationmailcheck33/indexdns.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071364; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/775b360c-eb23-4eb4-8661-3f596d2c0b85-bucket/verificationmailcheck36/indexdns.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071365; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/77dd6821-a0b4-4b69-ae03-7bba129775ff-bucket/webmail.htm"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071366; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7810f4f8-2a81-468f-9279-549518cb2827-bucket/cccs/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071367; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7810f4f8-2a81-468f-9279-549518cb2827-bucket/hg/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071368; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7810f4f8-2a81-468f-9279-549518cb2827-bucket/mand/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071369; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/782301e9-26cd-4960-aec0-cd285a724d0c-bucket/ukllu6thas.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071370; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/782301e9-26cd-4960-aec0-cd285a724d0c-bucket/ussj21skio0iu.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071371; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7843dfaa-6745-4454-9d36-4819673ec36e-bucket/cts/document.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071372; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7897b44c-1371-4ff5-b436-0bee3ee94f54-bucket/widget/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071373; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7946c409-3403-4c75-8d5a-42dcd45f22d2-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071374; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/795549b5-47e9-4ffb-9c56-aec445610cee-bucket/indexs%20(8).html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071375; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/79560a47-812b-45dc-bf12-2eaab065ad9c-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071376; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/79973aba-c547-4f14-885e-68afe1fec742-bucket/resolve202210real/administratior_web.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071377; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/799a8a7b-8adf-45f5-923c-75f0c1ad10a1-bucket/potorr/scre.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071378; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/79accc9a-6e68-42a4-b499-9b63a752db00-bucket/keepnewpassword.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071379; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/79d31b25-2c9f-403e-a9d8-6148594e556e-bucket/instantfilesauth/bom/getyourfilehere.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071380; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/79e0eebf-9221-4180-806b-e1dcfdb099fd-bucket/10112022/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071381; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/79e0eebf-9221-4180-806b-e1dcfdb099fd-bucket/24102022/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071382; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/79e0eebf-9221-4180-806b-e1dcfdb099fd-bucket/270920221/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071383; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/79e0eebf-9221-4180-806b-e1dcfdb099fd-bucket/270920222/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071384; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/79e0eebf-9221-4180-806b-e1dcfdb099fd-bucket/index1/industries.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071385; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/79e0eebf-9221-4180-806b-e1dcfdb099fd-bucket/link1309/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071386; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7a74bbc2-d6c4-4023-b0e1-07f015dc3e06-bucket/authtryencd.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071387; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7b2bc067-34e7-4cba-a7b4-c6761c28de73-bucket/fileofc2211122.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071388; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7b36eda0-0371-41c6-8874-f6703b4a8f61-bucket/wt/adobe.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071389; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7c603f44-49ed-4b97-bd50-4eea3615bee5-bucket/amazonaa/dr0pf1leupdatesabsnew.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071390; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7cdeaad9-c5c7-410b-a5a8-46614138bdc3-bucket/geeesev.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071391; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7d6c458e-1944-45ea-82ec-d2858466a75d-bucket/verificationmailcheck19/indexdns.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071392; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7d6c458e-1944-45ea-82ec-d2858466a75d-bucket/verificationmailcheck24/indexdns.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071393; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7d9c2685-e1b0-4294-9dd2-1c1cd91e284b-bucket/wrkme/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071394; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7dabb6a2-3778-46dc-9570-785069c1263d-bucket/01/french.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071395; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7e258800-5fbb-48b6-aadb-66833bbae502-bucket/offleek.htm"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071396; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7e28c615-a042-44f3-9517-e79d645d8fd4-bucket/young1/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071397; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7e28c615-a042-44f3-9517-e79d645d8fd4-bucket/young2/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071398; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7e28c615-a042-44f3-9517-e79d645d8fd4-bucket/young3/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071399; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7e28c615-a042-44f3-9517-e79d645d8fd4-bucket/young4/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071400; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7e28c615-a042-44f3-9517-e79d645d8fd4-bucket/young5/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071401; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7e820f61-5eee-45bf-b5a9-776b55bf432f-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071402; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7ebebe12-d2bd-4b08-85be-666d145d5cdc-bucket/indexx.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071403; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7f071fac-35d5-4c27-9c6e-13749b1668a2-bucket/tgrfcdssd3redwxs.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071404; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7fa09544-72de-42d4-976f-3024cde6c69e-bucket/hostconfig1/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071405; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7fa09544-72de-42d4-976f-3024cde6c69e-bucket/hostconfig2/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071406; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7fa09544-72de-42d4-976f-3024cde6c69e-bucket/hostconfig3/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071407; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7fa09544-72de-42d4-976f-3024cde6c69e-bucket/hostconfig4/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071408; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7fa09544-72de-42d4-976f-3024cde6c69e-bucket/hostconfig4/index.html#orders@kohyo.nl"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071409; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7fa09544-72de-42d4-976f-3024cde6c69e-bucket/hostconfig5/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071410; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7fa09544-72de-42d4-976f-3024cde6c69e-bucket/hostconfig6/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071411; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7fe52344-71e7-491a-957a-0808a3db62c4-bucket/idoj4td57.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071412; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/820194c6-76fa-4d68-b566-f9022a8602be-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071413; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8284401b-3d5f-47e4-a934-d5c2e4230410-bucket/play.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071414; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/828f799f-ec93-49ee-80de-39133affb3ee-bucket/bcse2356/test1.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071415; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/82eae8fc-d5a3-4378-910e-c052d7c6b3c9-bucket/off/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071416; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8339fe48-d7d7-41b9-8739-db625827eb6c-bucket/piholvwxeaoljvumpxwomogmbnfqokggvwxqxzhtbqlegyjobidohrylwlnlsrrwyatosfyrxfhtmznigrfjpfwtedivegiuccafuqfkjrhsozuf.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071417; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/83598799-3e15-4173-aa8e-4b29750e84f8-bucket/inv/officeonedrivehtml.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071418; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8385ea52-c62a-4f35-b151-3b2b3b18187c-bucket/index01.php.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071419; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/83c66579-b5b4-4c28-b275-68e2b9322fc4-bucket/file343.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071420; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/843ddc8e-7812-425d-8786-ff9f92019e5d-bucket/2/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071421; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/85120a16-3b77-4917-9466-2de60d4a15a2-bucket/l/lankkk.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071422; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/85120a16-3b77-4917-9466-2de60d4a15a2-bucket/ty/11hjnz1ty0-jxxz.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071423; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8513abd3-4ee4-48b6-b77d-1bd18a7cd8c9-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071424; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8597c647-be0c-4c4d-86ef-782b25c31b40-bucket/multifix/ca.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071425; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/85ead2c4-334a-4bee-8ff8-6078c87c775f-bucket/iphonesliima/dr0pf1leupdatesabsnew.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071426; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/870e5c98-20a9-4538-9263-008aa3958887-bucket/1/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071427; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/874423c4-5870-4de7-a59f-232a02efc3d9-bucket/teri/industries.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071428; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8798538d-cdf5-49e5-851b-8a7caa9c3169-bucket/nk/nhk/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071429; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/881ae0d6-b4ba-412f-9014-43b40841126a-bucket/office.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071430; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8825716b-47be-4920-9c9e-1ac2704de473-bucket/indexx.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071431; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/882f4ca8-442c-46a0-9db0-741716f89a94-bucket/dfgrhgrefr4tgrfed.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071432; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/898d7d1d-0095-44ce-ade2-b2577dd5f8cc-bucket/pages.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071433; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/89ebae1f-13a2-4e8b-8910-f44636fb07dd-bucket/index_365.htm"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071434; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8a00ec1e-658c-4e29-9ea5-46121ba6e3a0-bucket/office365.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071435; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8aa95686-e755-4cb8-880e-ba3c89be5822-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071436; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8b25c646-4c22-41f8-b7c4-d69cb6def2c7-bucket/sso/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071437; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8b451ece-c4a5-48d8-841a-b574505a6de3-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071438; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8bd17f68-df16-4290-b244-e788cc322e43-bucket/na-upse.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071439; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8be52137-8c73-4b07-a479-e5e36d433664-bucket/f3/auth.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071440; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8ccbfe29-7c38-4320-9fc5-fd5c4b22aa46-bucket/aootfile/cromexex.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071441; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8dc99422-d4c8-42b5-85ba-33ace76b8a2c-bucket/emailserver4/index4.html#username@domainname.net"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071442; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8f201af3-b8f8-4647-9bbf-0bad4f21f036-bucket/queseradon.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071443; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8f2fa405-3ce4-4605-8deb-082636751e2b-bucket/webhost1/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071444; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8f2fa405-3ce4-4605-8deb-082636751e2b-bucket/webhost2/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071445; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8f2fa405-3ce4-4605-8deb-082636751e2b-bucket/webhost3/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071446; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8f2fa405-3ce4-4605-8deb-082636751e2b-bucket/webhost4/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071447; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8f2fa405-3ce4-4605-8deb-082636751e2b-bucket/webhost5/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071448; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8f2fa405-3ce4-4605-8deb-082636751e2b-bucket/webhost6/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071449; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8fe4924b-a8c5-45fb-96d8-cb0e7276d196-bucket/1/index-s.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071450; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8fea9012-5a98-4540-8d2f-9ca1eb3641a7-bucket/wednsddayy.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071451; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/902a288f-75d0-496b-b17f-c8a6d24c7630-bucket/uaa/adobe.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071452; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9040ef9a-119e-4ce1-bf63-b09a71ed2f80-bucket/act12.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071453; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9040ef9a-119e-4ce1-bf63-b09a71ed2f80-bucket/act30.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071454; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9040ef9a-119e-4ce1-bf63-b09a71ed2f80-bucket/act45.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071455; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/905e69ea-0462-427f-a482-2d4a4ad0560a-bucket/varen1/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071456; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/905e69ea-0462-427f-a482-2d4a4ad0560a-bucket/varen2/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071457; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/905e69ea-0462-427f-a482-2d4a4ad0560a-bucket/varen3/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071458; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/905e69ea-0462-427f-a482-2d4a4ad0560a-bucket/varen4/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071459; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/905e69ea-0462-427f-a482-2d4a4ad0560a-bucket/varen5/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071460; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/90962a42-132b-4c83-a3a1-92e113f2c3cd-bucket/nddc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071461; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/91cee7ae-ad27-45c0-b553-63e08fe3a3e6-bucket/tny/test.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071462; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/91cee7ae-ad27-45c0-b553-63e08fe3a3e6-bucket/tny/test.html#user@domain.tld"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071463; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/92782670-8e61-4be0-b6f2-17ee79399a1e-bucket/p/index.htm"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071464; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9287494a-065d-4aa1-a9d8-040da7a8c2db-bucket/fileofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071465; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/92caa61e-7f22-44f6-913c-3b0517ecd6e2-bucket/ibmasgfgugferrft/ibogu.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071466; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9371778c-c525-45ed-8262-b6b9ec07a1a2-bucket/ws/adobes.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071467; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/940e82fc-941d-41db-8cce-ed1d3f4b7326-bucket/iurbb/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071468; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9440a1a1-eae6-4a34-8c35-32252b6b4326-bucket/w.htm"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071469; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/95077272-eadf-4bec-9622-5872a0086efd-bucket/geeseeve.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071470; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/964e1048-5b03-4dec-967c-466e7f3537ed-bucket/saved.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071471; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/96833c2f-7282-4f00-9305-a9f648f06703-bucket/ecmxx/scure/veri.html#x@x.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071472; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/96ceaecf-9eb0-45d6-8d81-ef961b958df7-bucket/webmail.htm#petr.vanicek@utia.cas.cz"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071473; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/97dc58b3-c8a8-4c6a-8a7a-8dcafe2abf80-bucket/dee.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071474; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/98b28e3b-634d-4bdc-a5a9-b7735e2ba109-bucket/authtry.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071475; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/99e44e81-9b24-4834-88f5-02b58e83bacf-bucket/rfq11012.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071476; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9a2dd98e-1817-44a5-a4d0-501dd1898f7f-bucket/indeex.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071477; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9affbc31-4c3e-4637-a9c9-5b6deca18ba8-bucket/ca/staples.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071478; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9b058b1a-4344-48eb-b6d0-3553bbc51dcf-bucket/indeex.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071479; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9b709b6e-5d83-47af-829c-1aa727249db8-bucket/yt/adobe.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071480; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9c208930-8835-454d-b049-7127541e7c21-bucket/fileofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071481; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9d5f8c9f-f2d7-4035-9069-7e1c1f0b7b79-bucket/verificationmailcheck1/indexdns.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071482; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9d5f8c9f-f2d7-4035-9069-7e1c1f0b7b79-bucket/verificationmailcheck2/indexdns.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071483; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9d5f8c9f-f2d7-4035-9069-7e1c1f0b7b79-bucket/verificationmailcheck3/indexdns.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071484; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9d5f8c9f-f2d7-4035-9069-7e1c1f0b7b79-bucket/verificationmailcheck4/indexdns.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071485; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9d5f8c9f-f2d7-4035-9069-7e1c1f0b7b79-bucket/verificationmailcheck5/indexdns.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071486; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9d5f8c9f-f2d7-4035-9069-7e1c1f0b7b79-bucket/verificationmailcheck6/indexdns.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071487; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9d7d1e58-5930-486a-b39d-31fbb3e857ea-bucket/excel.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071488; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9db6cf2b-31b2-4daa-ae4b-3e7e5cd04d72-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071489; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9dc70e9d-bb29-49ce-8ee1-f181439aca05-bucket/flawless/index(12).html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071490; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9dd5041e-dc3c-43c6-befc-cdc72cf64192-bucket/vaccation/vaccation.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071491; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9deb5903-5150-491d-bdb8-cd4226f3a733-bucket/hitmail1/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071492; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9deb5903-5150-491d-bdb8-cd4226f3a733-bucket/hitmail2/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071493; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9deb5903-5150-491d-bdb8-cd4226f3a733-bucket/hitmail3/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071494; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9deb5903-5150-491d-bdb8-cd4226f3a733-bucket/hitmail4/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071495; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9deb5903-5150-491d-bdb8-cd4226f3a733-bucket/hitmail5/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071496; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9deb5903-5150-491d-bdb8-cd4226f3a733-bucket/hitmail6/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071497; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9e80b099-a27b-447c-8744-49e5712a9975-bucket/lemay/tim.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071498; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9efa45c5-4264-4cb2-a4ba-0ec3d125498f-bucket/offleek.htm"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071499; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9f2d23ca-c5df-409f-8d0b-f2f040dca5cc-bucket/mncbx/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071500; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a050c21d-41f1-485d-bf4f-b3d5c9a379f1-bucket/graham1/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071501; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a050c21d-41f1-485d-bf4f-b3d5c9a379f1-bucket/graham2/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071502; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a050c21d-41f1-485d-bf4f-b3d5c9a379f1-bucket/graham3/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071503; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a050c21d-41f1-485d-bf4f-b3d5c9a379f1-bucket/graham4/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071504; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a050c21d-41f1-485d-bf4f-b3d5c9a379f1-bucket/graham5/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071505; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a0ce0e96-1821-4a6e-889c-d4b1e43eefc8-bucket/saved.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071506; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a11b8653-2408-4a21-a39d-5ad8dba1268b-bucket/pointsrdl/tomdex.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071507; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a13b5ba6-f9f7-4203-92e4-c62f329c654e-bucket/isjdomsnbckmkrezsxrdtpokjiuhygtfrdeswzxdswedrfdedrtfgyhujikominbuvyctxr/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071508; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a13b5ba6-f9f7-4203-92e4-c62f329c654e-bucket/isjdomsnbckmkrezsxrdtpokjiuhygtfrdeswzxdswedrfdedrtfgyhujikominbuvyctxr1/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071509; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a13b5ba6-f9f7-4203-92e4-c62f329c654e-bucket/isjdomsnbckmkrezsxrdtpokjiuhygtfrdeswzxdswedrfdedrtfgyhujikominbuvyctxr2/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071510; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a13b5ba6-f9f7-4203-92e4-c62f329c654e-bucket/isjdomsnbckmkrezsxrdtpokjiuhygtfrdeswzxdswedrfdedrtfgyhujikominbuvyctxr3/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071511; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a13b5ba6-f9f7-4203-92e4-c62f329c654e-bucket/isjdomsnbckmkrezsxrdtpokjiuhygtfrdeswzxdswedrfdedrtfgyhujikominbuvyctxr5/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071512; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a1f1764f-8d6c-4472-9af3-cb93bb5ab861-bucket/updatedomain21/index1.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071513; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a1f1764f-8d6c-4472-9af3-cb93bb5ab861-bucket/updatedomain22/index2.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071514; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a1f1764f-8d6c-4472-9af3-cb93bb5ab861-bucket/updatedomain23/index3.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071515; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a1f1764f-8d6c-4472-9af3-cb93bb5ab861-bucket/updatedomain24/index4.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071516; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a1f1764f-8d6c-4472-9af3-cb93bb5ab861-bucket/updatedomain24/index4.html#username@domainname.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071517; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a1f1764f-8d6c-4472-9af3-cb93bb5ab861-bucket/updatedomain25/index5.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071518; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a28af659-48b3-4d12-a22e-b8899d734a75-bucket/fileofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071519; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a365f7da-83d3-497b-9638-69db3ea0709d-bucket/wtfiles/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071520; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a3ea993b-e46b-4262-86bb-e203b205619e-bucket/share7.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071521; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a4185cab-b2d1-4296-afdb-1ef1e36fd2f5-bucket/ofink.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071522; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a426ca37-b4c9-4dee-99f0-3e3be4492db8-bucket/poweroutput.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071523; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a48a53ce-5ec1-4f83-9eb0-bd662d29b423-bucket/payed/mato.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071524; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a4cc510d-670f-432a-9bf1-1fd7aa8524bf-bucket/0fficebox.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071525; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a50ae91b-3e6e-4f93-b619-792d4681748d-bucket/ot/adobes.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071526; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a550df2a-219d-4b56-9462-100403b29a5c-bucket/heartcoldx.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071527; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a550df2a-219d-4b56-9462-100403b29a5c-bucket/saved.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071528; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a58da724-f6cf-43e0-a73c-09802a46e90e-bucket/now%20mee.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071529; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a58da724-f6cf-43e0-a73c-09802a46e90e-bucket/nusgdhjsdrseoe.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071530; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a5b00933-eb55-40fc-a648-5893b0050e53-bucket/f2/mails.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071531; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a62f588f-691d-4773-b2be-45672456f120-bucket/a/index.htm"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071532; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a7dbea2f-34c2-4113-9dab-f05bdfb60a47-bucket/fileofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071533; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a8220eee-aa53-4608-8d73-95f7cea4e334-bucket/fileofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071534; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a90c03c9-98bc-4714-9010-fba845226e78-bucket/server%20(1).html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071535; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a99125d3-2062-48d4-b67d-7413aee8aa2f-bucket/d-dropbox/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071536; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a9dcb77a-c11d-4d70-99fa-a42461bdc9c2-bucket/fileofcc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071537; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/aa2b94f7-e50e-4ead-b549-a1936dc857b9-bucket/lucatttt/beta2.html?email="; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071538; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/aa356e88-ce0f-4f22-9632-143285eded96-bucket/wetransferdocs/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071539; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/aa5ff617-e99e-49da-aacb-ddc00a79ce6d-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071540; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/aa6a9059-1df0-4bd7-8fb9-bd7e76ea9f61-bucket/htm.htm"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071541; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ab0c9e7e-8dca-495f-ad77-1f431e06f58a-bucket/accountset.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071542; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ab0c9e7e-8dca-495f-ad77-1f431e06f58a-bucket/akaoff.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071543; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ab0c9e7e-8dca-495f-ad77-1f431e06f58a-bucket/passupdate.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071544; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ac092efb-9195-493a-9607-c2ddef2f29a8-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071545; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/acb0bc28-4c50-4da1-a9e0-4c64f544fec1-bucket/gpm/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071546; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/acbac216-38ae-4750-870d-aa9da6f3e404-bucket/access.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071547; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/accbb7aa-a8a2-4b67-a43a-8a2b8865e626-bucket/mini/welcome.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071548; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/adcd38c5-de38-490d-bd6c-f5ffbe550761-bucket/1/1n1.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071549; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/adcd38c5-de38-490d-bd6c-f5ffbe550761-bucket/1/1n1.html#bernard.abbott@bjapartnership.co.uk"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071550; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/adcd38c5-de38-490d-bd6c-f5ffbe550761-bucket/1/1n1.html#dn@dorotheenilsson.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071551; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ade38da0-93ac-4f08-b642-50894aafb52d-bucket/inbox.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071552; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ae1f34c0-f236-4186-a66c-a4347914270f-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071553; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/aeb1625f-38ba-4374-ad3a-878dcba7ec19-bucket/columbiacountrypdf/scanned%20storage.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071554; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/aebee9bc-133a-4981-b7e9-f7ae4ee9dafc-bucket/new(7).html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071555; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/aedb1bc4-8509-4b3f-906d-6bdba0efea4b-bucket/syndic/confidential.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071556; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/aff9af69-c900-4d0a-9d18-94ab63688ade-bucket/dhs/index(2).html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071557; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b061c25e-11a9-401f-809d-ac57d117b182-bucket/eme23/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071558; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b07cbff4-e506-4592-98f6-244575ff54fd-bucket/werds/76332234up.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071559; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b07f2a1c-ed65-49c3-9aa9-7e91c3a0529c-bucket/a/a.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071560; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b0fa22f7-e13a-4cfa-9a71-f859c22c995d-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071561; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b185204c-c4cd-4d94-a66f-130d6fff645a-bucket/02/index%20(14).html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071562; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b2432d30-bda5-41c3-aa56-f0a878377315-bucket/james4/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071563; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b26e2175-8a73-48e5-9c8b-1e21a97359dd-bucket/wa/upgrade.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071564; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b2a1294d-8e22-4fde-8910-2766a7202fd8-bucket/3/index-s.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071565; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b2f2a717-aa3a-4486-b828-5726d95b10bf-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071566; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b30e9a6d-e37e-41e8-803b-169531010286-bucket/owa.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071567; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b31febab-2b3f-430f-9a24-8daf73e60972-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071568; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b32d705d-753a-4868-9067-ca33b43864db-bucket/fileofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071569; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b4c3fbe7-7eb3-4f11-9cf0-03c4e3fd47e3-bucket/vroot.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071570; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b4fa8507-2cc1-445d-ad51-6e012c6e4d56-bucket/kn/kmn/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071571; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b569aa73-3d5d-4e8f-84a3-78f2c5870f03-bucket/obamawtf/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071572; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b5955bdd-50c3-4e7b-86fc-cd791a2e985f-bucket/file1/filmm77.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071573; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b602e3e7-c5f5-4454-b6f1-7a835028cdde-bucket/offer_rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071574; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat1/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071575; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat1/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071576; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat10/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071577; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat10/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071578; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat11/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071579; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat11/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071580; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat12/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071581; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat12/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071582; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat13/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071583; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat13/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071584; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat14/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071585; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat14/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071586; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat15/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071587; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat15/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071588; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat2/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071589; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat2/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071590; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat3/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071591; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat3/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071592; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat4/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071593; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat4/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071594; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat5/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071595; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat5/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071596; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat6/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071597; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat6/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071598; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat7/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071599; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat7/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071600; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat8/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071601; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat8/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071602; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat9/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071603; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat9/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071604; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b6c979c7-4be6-4eb4-accc-9cc55f1d75d0-bucket/sharepoint%20weblogin.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071605; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b71b9137-cd44-48b4-93d0-5223010560ee-bucket/adobe/doc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071606; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b7425de1-641e-4bf0-95e9-493d43e537fb-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071607; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b7f72a11-d828-4628-9bf5-9453e9bba036-bucket/0365/7765387427376283982.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071608; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b8b6d789-eee9-49c9-bb10-b45954338aee-bucket/fileofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071609; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b91c922e-7486-43a2-973a-c3777ad765ee-bucket/now%20meerenn.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071610; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b937d62c-b576-430f-b4be-119cfe7a64bb-bucket/s39b60d3ff90c4e781b8.html#test@alam.edu.my"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071611; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b974e635-f03c-4000-a3d5-e507d952cc23-bucket/zxcvbqwelz/indewells-1.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071612; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b99dc5da-abd5-4c9b-8828-dcab1cade273-bucket/thir/login.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071613; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b99e914f-bb98-4ec1-ab58-b34bc904e356-bucket/indexx%20(1).html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071614; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b99e914f-bb98-4ec1-ab58-b34bc904e356-bucket/server%20(1)%20(1).html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071615; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/baa77836-6236-436d-bf69-9d01f360f538-bucket/hakwgfhfs/login.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071616; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bbb53b82-e723-4336-a344-fe30b5a2f097-bucket/fancy1/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071617; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bbb53b82-e723-4336-a344-fe30b5a2f097-bucket/fancy2/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071618; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bbb53b82-e723-4336-a344-fe30b5a2f097-bucket/fancy3/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071619; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bbb53b82-e723-4336-a344-fe30b5a2f097-bucket/fancy4/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071620; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bbb53b82-e723-4336-a344-fe30b5a2f097-bucket/fancy5/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071621; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bbc378a9-2eaf-45ad-887e-4d7d2919731e-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071622; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bc904cf2-8abe-4e8a-ad5d-8774596d97a0-bucket/inshawesdrctvybuniexscdrfxeszxrctvybuniominubyvtcrxexrctcrxectvytcxrctvyctxresdrftgyuhjik3/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071623; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bc904cf2-8abe-4e8a-ad5d-8774596d97a0-bucket/inshawesdrctvybuniexscdrfxeszxrctvybuniominubyvtcrxexrctcrxectvytcxrctvyctxresdrftgyuhjik4/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071624; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bce71efa-aa0d-4e19-8777-3cc40b90e98b-bucket/xkhri.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071625; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bd1d3480-affd-446f-86f9-b0c95c3a215c-bucket/crosby_securities_limited.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071626; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bd59cc69-9d3a-4cb4-814d-3e66ef85dc55-bucket/clean.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071627; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bd7cbd62-dcb3-4c3f-a281-37174514dbab-bucket/bd676tygf65bd676tygf65bd676tygf65/cce66384hhd7689cchd776f7889hdhuf.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071628; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bec0c9b2-ad5f-4012-8133-527c860ee6b8-bucket/office.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071629; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bffe4353-eb0d-4b45-8282-756234a38158-bucket/indexx.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071630; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c10c5f76-f186-4743-a4c6-7ef6fecbe9d8-bucket/fileoffc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071631; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c1476a6b-4fe1-4aa4-b874-93f278fa9bea-bucket/newnewofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071632; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c14d401f-b22b-46e6-9e64-b9e6d663f172-bucket/vbnm/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071633; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c1bab469-7ae9-4e67-bfea-66b3bcb19859-bucket/xblax/xroux/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071634; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c1bab469-7ae9-4e67-bfea-66b3bcb19859-bucket/xkosyx/xroux/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071635; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c1d7dc1c-fc75-4675-b29b-e257d5c66641-bucket/indexx.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071636; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c252a894-34a9-45a0-84b3-9edfe2b5dfaf-bucket/rfq11012.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071637; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c26ea9ac-0cfc-4a54-b6f1-643b5e00720a-bucket/2index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071638; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c28af2e3-079a-4f0a-ab73-00693f6fb387-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071639; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c29c753f-f046-4fb9-b5fe-38d7ffab3ac2-bucket/p/transportracine.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071640; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c4ecb581-c14c-4528-a005-0ca9b227f956-bucket/mailupdate9/index.html#test@test.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071641; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c4ecb581-c14c-4528-a005-0ca9b227f956-bucket/mailupdate9/index.html#username@domainname.co.uk"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071642; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c4f53510-c2dd-4a3a-bccf-1d7ed58a54a1-bucket/pickerdrllg.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071643; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c51ad29d-1139-40b5-9b5c-046aa491c295-bucket/qen.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071644; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c53683bd-f403-462d-a4f3-a456120bdb8c-bucket/adobesecure.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071645; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c55285e3-3d2b-49a9-942d-d14fd67f70f0-bucket/handler.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071646; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c5bf7885-803b-4dd7-9984-1fe33baa30e4-bucket/indexx.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071647; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c7674a83-715b-478e-bbb4-c18fbf09ae12-bucket/ukaa/lolo/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071648; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c7674a83-715b-478e-bbb4-c18fbf09ae12-bucket/ukaa/lolo/index.html#abuse@cloudflare.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071649; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c78b79a1-7ce2-4374-9ca1-b60fef47169b-bucket/920019992.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071650; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c7bef775-24de-4ec4-834c-59cb00f0d410-bucket/webadmin/webmaster/admin/esnowupgrade.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071651; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c7c14c10-4110-48ba-97cb-22b16746a77a-bucket/index.html?email=x@x.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071652; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c7cdfa4c-71b9-4ed2-bc0b-d887cb80f0a4-bucket/g2r/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071653; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c802419e-3144-40aa-97f4-2f87adc9ef71-bucket/adress1/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071654; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c802419e-3144-40aa-97f4-2f87adc9ef71-bucket/adress2/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071655; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c802419e-3144-40aa-97f4-2f87adc9ef71-bucket/adress3/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071656; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c802419e-3144-40aa-97f4-2f87adc9ef71-bucket/adress4/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071657; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c802419e-3144-40aa-97f4-2f87adc9ef71-bucket/adress5/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071658; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c802db92-b129-46f6-9af3-27e836083671-bucket/sharepoint.main.html#x@x.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071659; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c907a630-e444-4a04-886b-b5868e0f12a7-bucket/mmmk/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071660; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c95583f1-31fa-49a5-98d1-f8c1963f30d6-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071661; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c9a33cdd-833f-401b-b897-dbb80613358a-bucket/cleared.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071662; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ca78995a-cd30-4dc1-861c-2a5b52c37b30-bucket/fileofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071663; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cb8ed16e-0778-4b9f-beed-9f9cb1017991-bucket/hx/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071664; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cbffd7e9-e873-4c72-8f7b-69ce9161e733-bucket/doc/file.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071665; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cd58cb52-dd4e-4dcc-a2ac-54d4b76d6c9f-bucket/rfq11012.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071666; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cd67645e-8bb5-408e-baa5-0a38212c8e58-bucket/axis%20mechanical%20inc/secure-pdf.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071667; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cdbb47ae-57ef-40c2-91f9-7dd7c8032145-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071668; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cdf675f6-262f-4b1a-8219-76a2c0d4a7fa-bucket/clear.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071669; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ce3f870c-6602-4a04-8e8c-594aeac291da-bucket/hyty.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071670; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ce85f368-54e3-476c-946e-2d1443366eec-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071671; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cf49dfe6-989b-480a-89a4-6257c26f6108-bucket/upgrde.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071672; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cf4a7aeb-57b7-4e94-9024-19ce66cd528f-bucket/my/done.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071673; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cf712e3a-7c7c-41d0-8589-86b9d60318da-bucket/fileofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071674; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cfd6aac2-4c3c-49ad-ae3d-5a6c41d0d3ae-bucket/indexx.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071675; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d04fabb0-e1bb-416a-88e5-d87bef6f635b-bucket/aeqjca/securedf.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071676; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d0578fac-4893-44c0-8e67-0aeab64d80da-bucket/kklll/roundcube.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071677; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d05b1625-d8cc-41e4-9178-99dcae86af08-bucket/index%20(209).html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071678; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d07abc36-1bdf-4400-820f-9f9679bc8d11-bucket/invoice/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071679; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d1036811-cb11-47a4-a859-470e4ed5f6fa-bucket/microsoftlogin-data/micrsoftonllline.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071680; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d1322621-15be-4540-b119-74e5da191ab0-bucket/wtransfer/index.html#x@x.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071681; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d14de9fe-3e43-4fe4-9fed-1b8b2dcb4290-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071682; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d1ae1249-5ae7-49ae-b4f9-4f16b530e070-bucket/rfq11012.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071683; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d1dc6e73-7931-42ef-aaa2-1f5d61d4bb0a-bucket/owa/02384972384623453672.htm"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071684; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d28fdf3d-5bd7-4112-be05-3db1104f80fa-bucket/wetransfer/secureddocumet/document/secured/eweetransfer.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071685; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d2edcb57-6d3b-4b90-bd23-e2b2db5e36e9-bucket/oracle.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071686; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d2fa2ccd-65da-4cbb-bba7-4e2ff04f22ce-bucket/wetransferdocs7842678942/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071687; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d310717b-fd34-43c6-b0de-0b20f15d6492-bucket/authtry.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071688; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d3686ba7-b25d-4826-bae3-0faf82cab44f-bucket/encoded_file.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071689; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d3d20ab7-d27d-424e-828e-c3524eeb259d-bucket/indexx.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071690; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d468dea5-ad1b-4520-86ec-d3dd4c15ed23-bucket/fileofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071691; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d4cbd57f-a85f-414f-b484-7c3f62d2528d-bucket/keepnow.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071692; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d4eccf35-0358-4290-b81a-f6a982d5bdf9-bucket/payment/europe.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071693; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d501c5df-659a-491b-9b28-97ef88fdcf56-bucket/rest/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071694; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d501c5df-659a-491b-9b28-97ef88fdcf56-bucket/scoffs/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071695; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d5ae077b-9a18-4576-a723-be65692aaede-bucket/365/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071696; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d5ae077b-9a18-4576-a723-be65692aaede-bucket/mm/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071697; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d5b71b1c-3b80-4c8e-97d0-b4db5aef3557-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071698; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d6ba5f32-1c9e-44ab-bfa6-27a100306508-bucket/msh/shrm.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071699; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d6ba5f32-1c9e-44ab-bfa6-27a100306508-bucket/shrm/shrm.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071700; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d75abfee-06eb-4462-87d4-7dd311e5079c-bucket/offices.html?email=getbent"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071701; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d789b355-ad61-40d6-b113-9cf52fb4a338-bucket/indexx.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071702; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d83763c1-9059-40f5-b217-d5bc2c3c1bec-bucket/adobe/docs.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071703; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d867cf75-a81f-4819-8e71-6973900d13a3-bucket/file.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071704; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d88e7074-9eef-45f7-9daf-5a09c9ae0419-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071705; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d90b174d-7b66-4112-96db-71c06b38e453-bucket/fileofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071706; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d9faca97-3ef4-4f19-bdb7-744644982c59-bucket/webswindle1/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071707; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d9faca97-3ef4-4f19-bdb7-744644982c59-bucket/webswindle2/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071708; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d9faca97-3ef4-4f19-bdb7-744644982c59-bucket/webswindle3/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071709; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d9faca97-3ef4-4f19-bdb7-744644982c59-bucket/webswindle4/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071710; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d9faca97-3ef4-4f19-bdb7-744644982c59-bucket/webswindle5/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071711; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d9faca97-3ef4-4f19-bdb7-744644982c59-bucket/webswindle6/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071712; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/da4efa7d-93ec-4e1a-ae56-04a66c0dd03a-bucket/payment_update.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071713; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/daa24743-3a16-4cfb-9bc0-026f50d1593f-bucket/outlookquota.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071714; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/db523aa0-3715-4c11-9c2a-666adfe438e9-bucket/indexx.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071715; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dbbba225-63e2-46ea-8637-c3a8a7bff992-bucket/jeff.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071716; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dccbc06a-7bb3-4120-bedc-27d94b5a6e43-bucket/fileofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071717; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dd0e20ce-63b8-4df1-9e80-a2e4bf9b89bf-bucket/hi5/test1%20(1).html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071718; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dd97f0cf-4429-48ae-8db4-27a1b9d1d583-bucket/offlink.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071719; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ddb1db3b-7139-4a3c-a5ed-1e842da6fc69-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071720; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/de106e12-afc7-47ed-a45e-172440798261-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071721; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dea911f7-cf63-480b-a4b6-25a1d3a18f0e-bucket/b/com.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071722; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/decca190-a63b-4b0e-9ab0-afb6c79bae04-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071723; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/decca190-a63b-4b0e-9ab0-afb6c79bae04-bucket/update%20/webalizer2.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071724; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/df6cf312-d515-42fe-96cc-b201ef6cfa52-bucket/newnewofc.html?websrc=lgux9sxdeovjpdt6xj0npugnacf03kpdwsncsadkhtjszvepyxt6xkgg295vccocsihgry00yxtzjvrwkwoizasfxe28egljtqf2pp837virp30cnbqcr0na1hvkm2kaxd4p5xx4qyu8taxh3agpvnltdap14dsk9pysnbw3cjzhsfcbch119p0xu3vxfntjtfom9pgjlttfliwwy0pewjqmhijolbt65xcopmjz2btuhig5glda9arm777qmfzwyefnd2eyc3xxml1v3lusjglg8gwix3zzb1plbezpilbyso&dispatch=232&id=750190"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071725; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dffbc6ec-9172-4d45-ae39-884c23abc33d-bucket/stage_dffbc6ec-t10-a100c33d.html?err=tr0y66v1ojfdtym3eqn&dispatch=8a6&id=c3caa2ca60ab7c378aa9c0b4553930"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071726; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dffbc6ec-9172-4d45-ae39-884c23abc33d-bucket/storage_dffbc6ec-t10-a100c33d.html?err=zk1gzhuuz6dg60wmkwl&dispatch=5b6&id=a7a611475364c230164c0b0367c8c7"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071727; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e04ae811-099a-4b49-8de0-107e4d456064-bucket/storagesystem/test.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071728; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e0671c39-2dd6-4672-872f-78792d0f2a30-bucket/bouch/tim.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071729; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e0671c39-2dd6-4672-872f-78792d0f2a30-bucket/cnmus/tim.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071730; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e09f3ef1-7bac-486e-99b2-12dd553973f8-bucket/00/langs.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071731; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e24fd81c-fe35-4220-916a-5f6bdbbbd78c-bucket/authh.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071732; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e262d47d-ffb2-405f-8aa3-59034a23b618-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071733; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e2d367df-27bc-47c3-b7a3-4d3e6f8fd697-bucket/faktura/europ.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071734; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e3dd30bb-a121-4492-aaed-440a81a72c07-bucket/verifymail1/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071735; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e3dd30bb-a121-4492-aaed-440a81a72c07-bucket/verifymail2/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071736; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e3dd30bb-a121-4492-aaed-440a81a72c07-bucket/verifymail3/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071737; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e3dd30bb-a121-4492-aaed-440a81a72c07-bucket/verifymail4/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071738; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e3dd30bb-a121-4492-aaed-440a81a72c07-bucket/verifymail5/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071739; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e3dd30bb-a121-4492-aaed-440a81a72c07-bucket/verifymail6/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071740; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e3f21bd5-7ed2-4b34-8327-735a0b83032e-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071741; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e4b87a4f-2a04-4b93-bf43-f1cf18e854a0-bucket/webupdate.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071742; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e4b87a4f-2a04-4b93-bf43-f1cf18e854a0-bucket/webupdate.html#abuse@optusnet.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071743; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e61eeede-3cd0-4c0c-a107-08833c0ec841-bucket/swclassics776372.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071744; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e676921f-69b7-44b0-8dcf-8178a8518243-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071745; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e727fdb1-f41c-4a9b-9aea-d2f78c56a401-bucket/adobeverifystoragebucketapisystemauthorinitiative/indexxadobe.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071746; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e775e9e9-7b55-40c8-a6a0-fc0adb899459-bucket/fileofc%20(1).html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071747; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e89163cb-39d5-41dd-a32d-1338546aa873-bucket/webhub1/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071748; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e89163cb-39d5-41dd-a32d-1338546aa873-bucket/webhub2/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071749; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e89163cb-39d5-41dd-a32d-1338546aa873-bucket/webhub3/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071750; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e89163cb-39d5-41dd-a32d-1338546aa873-bucket/webhub4/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071751; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e89163cb-39d5-41dd-a32d-1338546aa873-bucket/webhub5/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071752; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e89163cb-39d5-41dd-a32d-1338546aa873-bucket/webhub6/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071753; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ea0eec92-d57d-441e-90e1-a455ac4ae949-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071754; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ea9d06d3-f885-4946-a633-dc68587a74d8-bucket/902113222.html#redacted@abuse.ionos.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071755; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/eada60f1-a3ad-4342-b6b1-f84ec75d6073-bucket/lankk.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071756; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/eaec3e2b-c02d-4192-b10c-b8c8a9318a1f-bucket/02/index(6).html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071757; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/eb56343d-c3ff-4a12-9707-7b1e7b7df558-bucket/webmail-login.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071758; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/eb6fe358-1ea3-499f-bd2a-e870e7cf22a7-bucket/ath.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071759; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ebfd41a2-fd8b-4507-8e55-8cef921acd7b-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071760; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ec16a01a-a84f-42da-bb4e-43675e3533bb-bucket/docu/drop.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071761; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ed203bae-aee8-471b-a88a-64c5c676b8cd-bucket/uye/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071762; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ed432db3-8379-46ce-953b-55a4dccb359c-bucket/ghg/pag.html#redacted@ionos.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071763; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ed482e2c-83aa-4482-aabe-ad7bd0ef20e5-bucket/cre.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071764; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ed595dc4-eb2a-4dbc-82fa-3f7a53f0a012-bucket/saved.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071765; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ed81890a-3d9e-44a6-a354-325ad6d2478a-bucket/newf.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071766; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/edd36ae3-3254-4149-83ce-17be188be9e0-bucket/wenutritioncom4/index.html#user@example.org"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071767; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ee69b89c-42ab-47a2-85e7-c65632abb507-bucket/1/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071768; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/eebd16d9-fca4-48ac-9965-9f552f25aaf6-bucket/sg/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071769; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/eed55a84-55f2-499f-a1bb-6e1bf7cfb87c-bucket/03/milk.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071770; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ef24ad58-ec7b-4c7e-aae4-656d4b7d8e77-bucket/kkred.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071771; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ef24ad58-ec7b-4c7e-aae4-656d4b7d8e77-bucket/mchla.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071772; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ef24ad58-ec7b-4c7e-aae4-656d4b7d8e77-bucket/zzymmeme.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071773; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ef692558-db56-4b63-89e6-ebb8162f59f2-bucket/approver5/approver-email.html#xx@xx.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071774; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f025dba3-de1a-432c-b712-d39aebb24da9-bucket/ygdexzjmcgslqfszaibovdqovbxjvqyamtijomkuoinlpheamxvgdgxmviavtjjtuknvdihhzrkemomkorqpqtnvxxwpdkwimldlguxxvzqjuqugthrtu.html?$web_only=true&_branch_match_id=1120978995120062243&_branch_referrer=h4siaaaaaaaaa8sokskottlxl84rtctolu8rrsppts5lkqrizyzqsywo0mvjzmvwt9x3q8zplfjimw8vtqial/jf8jmaaaa=&utm_medium=marketing"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071775; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f08b91d5-28b5-466f-bc01-cd70ee25a336-bucket/index.html#xx@xx.ch"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071776; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f0a39cb6-7711-40ab-be29-d0936b9bda2e-bucket/greatmacha.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071777; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f0c651e7-d81f-43e3-ae4a-a71fa39a1a37-bucket/eeeeee/index.htm"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071778; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f1e747e4-2191-4882-bc0f-5f96e3778913-bucket/configresolve3/index.html#info@mup.cz"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071779; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f354f205-8c70-44bf-9b3f-143e7e5d006e-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071780; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f37abb97-103c-4b34-a9df-b753a48b94d5-bucket/deso/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071781; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f37abb97-103c-4b34-a9df-b753a48b94d5-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071782; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f3ef10af-a758-41b2-b7b8-d7dc6e6d295c-bucket/7565.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071783; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f496da6c-c2c4-4ab0-89b1-f9f90ba6d617-bucket/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071784; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f6025d56-bf8c-4d6b-9d21-319f7b4fbca5-bucket/rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071785; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f62883a3-f731-456a-af6b-2640464a91b7-bucket/index.html#x@x.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071786; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f65409f0-fc6e-416e-8256-76487a2c8ead-bucket/pric/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071787; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f672b375-ef55-42a7-bdff-b11eb8fc9abd-bucket/66.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071788; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f684530c-767e-461c-843e-b59d2a9b9d5c-bucket/fileofc.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071789; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f7e4050d-09d0-4546-aaa2-e4c2c118b874-bucket/10995/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071790; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f878cd6e-6f7a-4fd6-a74f-ff07c9ff12b2-bucket/wills1/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071791; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f878cd6e-6f7a-4fd6-a74f-ff07c9ff12b2-bucket/wills2/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071792; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f878cd6e-6f7a-4fd6-a74f-ff07c9ff12b2-bucket/wills3/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071793; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f878cd6e-6f7a-4fd6-a74f-ff07c9ff12b2-bucket/wills4/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071794; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f878cd6e-6f7a-4fd6-a74f-ff07c9ff12b2-bucket/wills5/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071795; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f933c214-70d2-444b-a8c9-7cc3b8fb8a83-bucket/offer_rfq11002092.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071796; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec1/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071797; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec1/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071798; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec10/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071799; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec10/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071800; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec11/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071801; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec11/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071802; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec12/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071803; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec12/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071804; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec13/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071805; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec13/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071806; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec14/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071807; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec14/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071808; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec15/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071809; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec15/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071810; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec2/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071811; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec2/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071812; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec3/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071813; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec3/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071814; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec4/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071815; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec4/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071816; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec5/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071817; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec5/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071818; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec6/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071819; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec6/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071820; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec7/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071821; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec7/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071822; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec8/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071823; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec8/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071824; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec9/index.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071825; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec9/index.html#a@b.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071826; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fa7d3aaf-eeb8-4e02-8d10-6c34571a5548-bucket/em-accountshosting2/index4.html#roger.meier@4synergy.com"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071827; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/faa57e83-a377-4774-b9ef-a2a22e1435f1-bucket/ind.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071828; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fab72164-712b-493d-881d-6d892416573b-bucket/verify.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071829; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fba764ec-8d2a-491b-817e-dc47850ee6e0-bucket/sdfgthygtrfeds.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071830; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fdbe15cb-8405-4530-937e-33356dca6c19-bucket/02/intell.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071831; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fde44815-8fc3-4db1-bf26-86926ffd3985-bucket/styles.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071832; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fed7fce4-adbc-499d-985e-9c3ea4070ada-bucket/ggenn.html"; http_uri; nocase; content:"storageapi.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071833; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/api/dhl-express/postdhl/ch/dhl/"; http_uri; nocase; content:"streamlive.to"; content:"Host"; http_header; classtype:attempted-recon; sid:200071834; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-wp/vystarcu/vystarcu.org_/index.php"; http_uri; nocase; content:"styleandmakeupeffect.co.za"; content:"Host"; http_header; classtype:attempted-recon; sid:200071835; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1571976"; http_uri; nocase; content:"sun.eduzz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071836; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/:x:/r/personal/adrian_ramos_superpark_com_hk/_layouts/15/wopiframe.aspx?guestaccesstoken=vofjngnui%2fslbameorlq62qlg8mcdnpo1dizu6i%2bc1m%3d&amp\;docid=1_124bbb2f682ca4c7daba6cec6ee34dfb9&amp\;wdformid=%7ba85c8abe%2d68be%2d43dd%2d91f3%2db397386186be%7d&amp\;action=formsubmit"; http_uri; nocase; content:"superpark-my.sharepoint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071837; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/qbz5jjm9a"; http_uri; nocase; content:"supersurvey.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071838; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/millennium_management_llc_e1780935.html"; http_uri; nocase; content:"supplierss.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071839; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?m=0"; http_uri; nocase; content:"support-chase-help.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071840; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ckbas?bfqkc"; http_uri; nocase; content:"surl.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200071841; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ckbas?pfznlo"; http_uri; nocase; content:"surl.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200071842; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ckbdk?wtkpo"; http_uri; nocase; content:"surl.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200071843; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ckbgr?zkvync"; http_uri; nocase; content:"surl.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200071844; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ckbjh?unhiep"; http_uri; nocase; content:"surl.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200071845; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/zs/ffbunc"; http_uri; nocase; content:"survey.zohopublic.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071846; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/zs/wxd79i"; http_uri; nocase; content:"survey.zohopublic.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071847; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/608bca7586919c70a2066ef7"; http_uri; nocase; content:"surveyheart.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071848; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/60fff0e60888042acd81382f"; http_uri; nocase; content:"surveyheart.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071849; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/621b14f5c65e8f2fdc0ec20c"; http_uri; nocase; content:"surveyheart.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071850; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/622b8c8ed898226fb3ed9404"; http_uri; nocase; content:"surveyheart.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071851; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form/6255d8c288a46f5efbbc781c"; http_uri; nocase; content:"surveyheart.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071852; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/.cha.htm?feeccf00ec7600bcf71c"; http_uri; nocase; content:"szsmartest.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071853; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7nvaa7gshn?trackingid=gvnj958o&signature=newsletter"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071854; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7nvaa7gshn?trackingid=iu65vdbt&signature=newsletter"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071855; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8kuqorubt4?signature=newsletter&amp\;trackingid=qj0y6ihhlutkjd3fwk0gxurjedhgfoe1"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071856; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/9ooxxstzmb?amp=1?trackingid=aeqsrw06&signature=newsletter"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071857; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/almyiprdy1"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071858; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cp5qtxevcp"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071859; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d20fv95nv7"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071860; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ee5qa00j0d"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071861; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/farvpf10hd"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071862; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fy2lasfqae?trackingid=4zhypwnm&signature=newsletter"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071863; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fy2lasfqae?trackingid=sficgo6n&signature=newsletter"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071864; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fy2lasfqae?trackingid=soiybkrq&signature=newsletter"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071865; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/hklifuye7q?signature=newsletter&amp\;amp\;trackingid=v2izthgeggs2ontblne93wojyanti2dz"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071866; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/iykltpgxzq"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071867; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/j6la6tjeil?signature=newsletter&amp\;trackingid=ikxy5w2prwakarovqzyjf5lsipf1elqt"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071868; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jcyrtlrlqf?trackingid=dikwswiz&signature=newsletter"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071869; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k78cpcjb9y?https://webmail.spectrum.net/mail"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071870; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/lw5kd2y1yg"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071871; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/nnracfdpqz?v=kpdqhnid-d2?trackingid=ub8f4520&signature=newsletter"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071872; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/nnracfdpqz?v=leovdeob-hu?trackingid=xplu2ju0&signature=newsletter"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071873; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/nnracfdpqz?v=vrllwvpk-78?trackingid=cnr8reb5&signature=newsletter"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071874; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/nnracfdpqz?v=xlp6ftab-dk?trackingid=86sfocz4&signature=newsletter"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071875; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/nnracfdpqz?v=xth3uugp-ly?trackingid=3xaexyou&signature=newsletter"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071876; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/oc8dgzpvag?type=news_sduwftmbmgintfa&amp\;page_id=141"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071877; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/pw7pa4xm5s"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071878; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/rluo5vve4j"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071879; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/rqcv9sn2pt"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071880; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/uqjhuzcwqg?trackingid=xqyal3bj&signature=newsletter"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071881; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/z3gsth5xgs"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071882; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/zexkinnbot?100757100757"; http_uri; nocase; content:"t.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200071883; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/+pg0whvxoqzgzmdg0"; http_uri; nocase; content:"t.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200071884; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dary_gerald_1"; http_uri; nocase; content:"t.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200071885; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/franklinscott23"; http_uri; nocase; content:"t.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200071886; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fxcryptotradegrouphelp"; http_uri; nocase; content:"t.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200071887; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/irs_agency"; http_uri; nocase; content:"t.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200071888; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/irsagencies"; http_uri; nocase; content:"t.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200071889; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/lin_bertha"; http_uri; nocase; content:"t.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200071890; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mmoretti_acapenergy"; http_uri; nocase; content:"t.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200071891; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/puretradetechsupport"; http_uri; nocase; content:"t.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200071892; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ukex_service"; http_uri; nocase; content:"t.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200071893; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ctc/2o+23284/d2mn3804/jks2-6q7w69smd-6lz3nbmj7sc_7qqksn1r_qcnw-dyfw4j59qr5n3nm7n8tgd1f6dmdqn6_wcncqssmjw75x6ml8cqfrxw52qtnz18mycpw4c90dw7kn082w61xd9w6708zxvkg8rv1wmsjnw7vjrtt6_gtmbw9kgdqj5393dkn4vw9kmg_8sqw2mnfmf1-mxy1v_r8kx1yhryvw1dq50l3qyc1zw5kfqng2m7rpqw10d_-v6wchmlw2vfr438d4twpw5ttlkn7k92v7f8r1bry04"; http_uri; nocase; content:"t.sidekickopen01.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071894; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/admin_gmx"; http_uri; nocase; content:"taplink.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200071895; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bellsouthatt"; http_uri; nocase; content:"taplink.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200071896; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/hyperoutubro"; http_uri; nocase; content:"taplink.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200071897; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mixmaga"; http_uri; nocase; content:"taplink.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200071898; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/tngdigitalcompany"; http_uri; nocase; content:"taplink.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200071899; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/yahoooooooo"; http_uri; nocase; content:"taplink.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200071900; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/chat/634ad0ffdaff0e1306d2270e/1gfe40s06"; http_uri; nocase; content:"tawk.to"; content:"Host"; http_header; classtype:attempted-recon; sid:200071901; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/files/system32/procesosdeseguridadhb/170.51.165.16679791/agregar/telefono/contacto/logonoperacionservlet.html"; http_uri; nocase; content:"tecsuport.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200071902; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/pdf-09-20"; http_uri; nocase; content:"telegra.ph"; content:"Host"; http_header; classtype:attempted-recon; sid:200071903; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2021/03/blog-post_48.html"; http_uri; nocase; content:"telenorkandklimsupoort.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071904; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?shiny"; http_uri; nocase; content:"telhanorte-90.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071905; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-images/data.ssl/americanexpress.ssl-onlineaccess"; http_uri; nocase; content:"theexpiredlistingspecialist.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071906; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-images/data.ssl/americanexpress.ssl-onlineaccess/"; http_uri; nocase; content:"theexpiredlistingspecialist.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071907; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5cgfd"; http_uri; nocase; content:"tiny.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200071908; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/owes09"; http_uri; nocase; content:"tiny.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200071909; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2p834ucy"; http_uri; nocase; content:"tiny.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200071910; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2s37aper"; http_uri; nocase; content:"tiny.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200071911; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/56y4th"; http_uri; nocase; content:"tiny.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200071912; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/audumx"; http_uri; nocase; content:"tiny.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200071913; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/fj58gof"; http_uri; nocase; content:"tiny.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200071914; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ing6288"; http_uri; nocase; content:"tiny.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200071915; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ing6588"; http_uri; nocase; content:"tiny.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200071916; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ing8478"; http_uri; nocase; content:"tiny.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200071917; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ing9488"; http_uri; nocase; content:"tiny.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200071918; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ingdirect738"; http_uri; nocase; content:"tiny.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200071919; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/l93cxi"; http_uri; nocase; content:"tiny.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200071920; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mr27pjfw"; http_uri; nocase; content:"tiny.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200071921; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/pty4by"; http_uri; nocase; content:"tiny.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200071922; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/pznd63c"; http_uri; nocase; content:"tiny.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200071923; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/sa3912f"; http_uri; nocase; content:"tiny.one"; content:"Host"; http_header; classtype:attempted-recon; sid:200071924; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/29enwtnd"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071925; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2af7vrhc"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071926; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2eqd4ztu"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071927; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2h6rkvac"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071928; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2hyzek53"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071929; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2lv48thw#example@example.com"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071930; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2m9r9nhr"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071931; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2msoduwp"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071932; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2s477v49"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071933; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2ycsrwjy"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071934; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2zvrhp9b"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071935; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/34rspyjn"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071936; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/35s6t384"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071937; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3855ch4p"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071938; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/39388cx8"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071939; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3fcmy5ap"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071940; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3wc2zk3m"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071941; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/46xnsx7f"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071942; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4ncwv5dj"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071943; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4nwnbpxa"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071944; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/59rb3hv8#job@mup.cz"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071945; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5c3u5my2"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071946; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/accessobperweb"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071947; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/asdd2022"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071948; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bdhrb85b"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071949; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bdze3822"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071950; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bperbanca"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071951; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bperbancaweb"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071952; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/docu1fax"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071953; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/facebook-rg4nexv"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071954; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/facebook-verify-no-jgwqcwfnjv"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071955; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/facebook-verify-no-mhe0ohp9"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071956; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/facebook-verify-no-vbhhyp"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071957; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/facebook-verify-no-xixqr6i9b"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071958; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form-6840baod"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071959; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/form-i1tknpeygn"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071960; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/hccf5vup"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071961; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/issueslagv3a"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071962; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/meta-verify-form-4hg3l1btr"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071963; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/meta-verify-form-dqd86ubhbq"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071964; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/meta-verify-form-flkzbx1s3f"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071965; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/meta-verify-form-hijw94ctlf"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071966; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/meta-verify-form-lfxes1fttl"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071967; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/meta-verify-form-odmnerxjsg"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071968; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/meta-verify-form-osgfshdnaa"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071969; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/meta-verify-form-rklewcyh"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071970; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/meta-verify-form-srr085p"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071971; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/meta-verify-form-t2zgxdx9"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071972; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/meta-verify-form-umnwdly"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071973; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/meta-verify-form-y6ftsfwn"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071974; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/meta-verify-form-yafbicqxn"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071975; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/n46yywaw"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071976; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/naumnst#redacted@abuse.ionos.com"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071977; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/verificaappbper"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071978; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/verificabperit"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071979; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/yc24jz87"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071980; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/yettf66x"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071981; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/yn7ywman"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071982; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/indexs%20(8).html"; http_uri; nocase; content:"tlecorp03802.fra1.digitaloceanspaces.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071983; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp"; http_uri; nocase; content:"totalmerchanteast.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071984; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/h/v6/link-track/1.0/1612678003989072-e5f6d8cc-499b-ea4f-85f1-8b23ad935661/1612677988/2f5895837f8d3f0a667c6b92ad41f652/8af273ac431e289838c8bf7c490185f3/3fe2530ffaa60580b73b9eec6af02f4d?redirect_uri=http://amazon.com"; http_uri; nocase; content:"tr.cloudmagic.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071985; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/h/v6/link-track/1.0/1614590779401122-8e06125c-4b23-d643-3068-601cab9bec04/1614590763/2f5895837f8d3f0a667c6b92ad41f652/31367888a66bf6f98973a200c83075bb/3fe2530ffaa60580b73b9eec6af02f4d?redirect_uri=http://amazon.com"; http_uri; nocase; content:"tr.cloudmagic.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071986; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c/?bn=35405429\;cpdir=https://tmmny.csb.app/.wewrewew.ahr0chm6ly9pbnzlc3rpbmdpbmdvzc5vcmcvqvbjmjq3.yw1izxiuzml0dg9uqhnwyxjrlmnvlm56"; http_uri; nocase; content:"track.adform.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200071987; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/signup/bonus"; http_uri; nocase; content:"trade.dydx.exchange"; content:"Host"; http_header; classtype:attempted-recon; sid:200071988; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp"; http_uri; nocase; content:"trailhorsesofcolorado.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071989; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ls/click?upn=gr3wr7rgeivmckanuu6wjnhkwy9tydxtvizfx1gi0ufp4wl4rjnpu03sdiwleepniufu4xy4mayst1gv83vivlvig70treysmewsxadbu7iiqcrtqoeqakyelsvyjoxnv3alnjexcp1s-2fymusoar9nn2ibwf1fnh9i6-2bp0rd6fpjlkjcolaxxqawzxvszbpu9xwtoiwpnlbndm9cyz0w549iwn7bmayarlo1-2bplrurs-3dhiiy_an1f-2bbb-2fqcmeza1f82vrgunwjs-2fxx2ewqebxtrpvludzeden-2blmkkoabizc1-2bovocdnnx-2bfth4idi3uynrkzfyie9jxpsh9q2nht1wj2qk2g8xlvoxoifzml90wti-2fyvhnizcyo1ug2g31vbvwewpjpryeux5qixdip5gismcj8yketongl5lhm8dcbcbv2xzqdeng9tmuewkuqbvgv0wuu22wzgolwt-2bw-2btvtlsfzgvmmsn31lb8t8q8aipzswga-2bcpdnt0qxnjblo4c2dteqisl-2fwdlamvbmhbtcmx-2ftshg4svapfcqowaa4t8ja2palufqdynt5cisjbpx33s1rzwwvsywwfayst3czhfnkjtg0e0xxco4yxoig7kwsjjtowbq623c0uqo7mrwdiczkfqosp6fnxdd-2fohylougtvibf88zs65pgbtw0jyjbph#a@b.com"; http_uri; nocase; content:"trk.klclick3.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071990; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ls/click?upn=rh-2bf9hqggd83zvr8-2f2urpq9jza4nfyepanu7d3q3phc5fuhcmko-2bdnkpb77-2frn0jksb4_12auc2qfc-2fmvanj9w5gz1niyn6w81nfyizixxcjyohcdjetmz8z7ozsg5qrzrqqfo70kk0rjxowq28q5nzx71p4rno1y2borqqazxmt0955ioulj3hotvbzkpo8pa09ilfa4l4xjki0vdirect7fh-2btqojn5nn-2bsvj56b8oj6ytisepl-2fyndoytlygbqfjcsnzj7xrxpcpc2y33v-2brcfmdaa-2fuzaljxshizppw79wtya017swhsi773accxnrksgojupnndhln5rwkqefr00pg-3d-3d"; http_uri; nocase; content:"trk.klclick3.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071991; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ls/click?upn=vj3dadlrp-2fcfi22cxv5slmj9bs27v4ur9e-2f6aekkiuju7zruatjxol6lgt5xi6fx6lhwu7l9t0cxeulddiovrbyfpra1wztkgpi63kwkws-2bmvhmxfgmb6yn7jskx-2fu4r03dky7iafgb-2fta6hwqby63ucxfknnix2s1jtelfxd3wiwwlifn0vjgeal5ujbmupx8bbjcxvchr1ok8xfrqfnmy836ctsoh-2flt3d7uovnjooazs9eprx4wedfnmn7-2ffobhap4tt4pl-2f8q2poovn5cgshg-2fbbipi0gmepwr3skurvpjwgiyerch1vtr9yyrov5bbgjn-2fvhfiffsnaqi5bca-3d-3dkqpr_0ivmhd7nsoe2up5tze3op8d-2fsn3ohure6d19gi8qjbwosimpdtamk7y8urnfbq0eurrturkgyz8ptfq84s0oghdjaey4eqygfme-2fornmqugxkvuhwavsrvpuyd6j3ehclftk-2fmhytlzdz4wv4ecss4tpqsttkgejqscggvgnl9s16ulwcz4ssvrqiuim0snvj2i6p8dzv6clywsguhbw5yjht4b08ursgrgxp0j7nmkuf93odmq9xwbxnuqp-2bry65pnu-2frpphtuvgjsa8tolngsbb8jnsy6mjxkfnkxn672ryzlksl-2bcvphralufouhwimybzdacvpo13oxjwigqqcoyv2yfewxdqtphaydrskcereezuvegylv3m76xouvyyowqnmkdh13-2bfz01-2bqnsuw-3d-3d#amfwzxjlekbiyw5jb29wlmnvbq=="; http_uri; nocase; content:"trk.klclick3.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071992; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/81ad8277-2641-4559-9924-3226fff1aeb8?lm_sub=4183&lm_list=gmail_cleaned&lm_shoot_mode=manual&lm_version=8201&lm_id=mlacys97%40gmail.com&lm_age=22%2f08%2f1964"; http_uri; nocase; content:"tuntine-resport.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200071993; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/b9sm"; http_uri; nocase; content:"twixar.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200071994; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/hcsm"; http_uri; nocase; content:"twixar.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200071995; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/0btoha"; http_uri; nocase; content:"u.to"; content:"Host"; http_header; classtype:attempted-recon; sid:200071996; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/_sglha"; http_uri; nocase; content:"u.to"; content:"Host"; http_header; classtype:attempted-recon; sid:200071997; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ehpnha"; http_uri; nocase; content:"u.to"; content:"Host"; http_header; classtype:attempted-recon; sid:200071998; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/otngha?communitycenter.tbk"; http_uri; nocase; content:"u.to"; content:"Host"; http_header; classtype:attempted-recon; sid:200071999; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/pv1eha?helprecovery"; http_uri; nocase; content:"u.to"; content:"Host"; http_header; classtype:attempted-recon; sid:200072000; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/qgxnha"; http_uri; nocase; content:"u.to"; content:"Host"; http_header; classtype:attempted-recon; sid:200072001; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/xt1tha"; http_uri; nocase; content:"u.to"; content:"Host"; http_header; classtype:attempted-recon; sid:200072002; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/pbi_pbi1151/login/remote/071108407/6"; http_uri; nocase; content:"ucbonline.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072003; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/:w:/g/personal/jmlee_ucmo_edu/ey4vifgt_7nfmz9xrsc5lpcbyiu2dkrhyz1vcu3pcml_la?e=4%3advzg7b&amp\;at=9"; http_uri; nocase; content:"ucmo0-my.sharepoint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072004; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jp"; http_uri; nocase; content:"ukrclient.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072005; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2jtcaszcsaza/click-here-to-verify-your-email"; http_uri; nocase; content:"unigeol.quip.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072006; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/uploads/user/05f89058-061c-48b2-856d-a88922dc294e/5r8g-index.html"; http_uri; nocase; content:"uploads.codesandbox.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200072007; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/000"; http_uri; nocase; content:"url.dscdut.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072008; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mail2022"; http_uri; nocase; content:"url.dscdut.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072009; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/nudi"; http_uri; nocase; content:"url.dscdut.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072010; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?byzfzh01a8agnrfkn2qmyujcvyce3awstvjvfvza8k7z-mi7uoyekfwkp0v6uia5gksaqub2jvcrtkxzypflbtm3dvnmhilt5onpcy2165mweqkphha5rbmbyvrk68yts"; http_uri; nocase; content:"url.emailprotection.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200072011; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3iv4d"; http_uri; nocase; content:"urlis.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200072012; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/result/d20ea0a6-903f-46c2-9377-ac533812b1ad/"; http_uri; nocase; content:"urlscan.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200072013; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3m_r1"; http_uri; nocase; content:"urly.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200072014; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3m_y1"; http_uri; nocase; content:"urly.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200072015; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3nz8-"; http_uri; nocase; content:"urly.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200072016; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ic37"; http_uri; nocase; content:"urlz.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200072017; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/igvb?/page-help-support"; http_uri; nocase; content:"urlz.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200072018; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/igvj?/page-help-support"; http_uri; nocase; content:"urlz.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200072019; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/jreb"; http_uri; nocase; content:"urlz.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200072020; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6wmka"; http_uri; nocase; content:"urlzs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072021; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/au4zs"; http_uri; nocase; content:"urlzs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072022; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dbgei"; http_uri; nocase; content:"urlzs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072023; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/g8zxv"; http_uri; nocase; content:"urlzs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072024; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/hzqas"; http_uri; nocase; content:"urlzs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072025; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/x6pbm"; http_uri; nocase; content:"urlzs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072026; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/contact-form?u=a08b8fa7dc281a5b052ab3d7e&amp\;form_id=cf82998934d3892f4062e1fa338e95e4"; http_uri; nocase; content:"us11.list-manage.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072027; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/files/v2-38f0f72da4da2686af385a6c3d09fdba/green-protected.html"; http_uri; nocase; content:"user.fm"; content:"Host"; http_header; classtype:attempted-recon; sid:200072028; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/files/v2-595517b1f7efa10ca01b2e34aca7af82/office-protected-file.html"; http_uri; nocase; content:"user.fm"; content:"Host"; http_header; classtype:attempted-recon; sid:200072029; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/usps/verification/"; http_uri; nocase; content:"usmailreport.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072030; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/lmal"; http_uri; nocase; content:"usnd.to"; content:"Host"; http_header; classtype:attempted-recon; sid:200072031; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/moblie/client/login.html"; http_uri; nocase; content:"ussposit.melevel.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072032; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2gfq?facebook_secu%c9%beity_report="; http_uri; nocase; content:"v.ht"; content:"Host"; http_header; classtype:attempted-recon; sid:200072033; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2nitw?security-page?security.id"; http_uri; nocase; content:"v.ht"; content:"Host"; http_header; classtype:attempted-recon; sid:200072034; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/abqe"; http_uri; nocase; content:"v.ht"; content:"Host"; http_header; classtype:attempted-recon; sid:200072035; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/bbjiy?team_report_page"; http_uri; nocase; content:"v.ht"; content:"Host"; http_header; classtype:attempted-recon; sid:200072036; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d0bv?confirmation_facebook_report"; http_uri; nocase; content:"v.ht"; content:"Host"; http_header; classtype:attempted-recon; sid:200072037; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/e4ea?team_report_page"; http_uri; nocase; content:"v.ht"; content:"Host"; http_header; classtype:attempted-recon; sid:200072038; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/gsig?confirmation_facebook_report"; http_uri; nocase; content:"v.ht"; content:"Host"; http_header; classtype:attempted-recon; sid:200072039; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/iesrb?security-page?security.id"; http_uri; nocase; content:"v.ht"; content:"Host"; http_header; classtype:attempted-recon; sid:200072040; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/kvisr?confirmation_facebook_report"; http_uri; nocase; content:"v.ht"; content:"Host"; http_header; classtype:attempted-recon; sid:200072041; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/midb?confirmation_facebook_report"; http_uri; nocase; content:"v.ht"; content:"Host"; http_header; classtype:attempted-recon; sid:200072042; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/n5j4d"; http_uri; nocase; content:"v.ht"; content:"Host"; http_header; classtype:attempted-recon; sid:200072043; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/s7zj?confirmation_facebook_report"; http_uri; nocase; content:"v.ht"; content:"Host"; http_header; classtype:attempted-recon; sid:200072044; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/vymxy?confirmation_facebook_report"; http_uri; nocase; content:"v.ht"; content:"Host"; http_header; classtype:attempted-recon; sid:200072045; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wdhoz?security-page?security.id"; http_uri; nocase; content:"v.ht"; content:"Host"; http_header; classtype:attempted-recon; sid:200072046; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wexf"; http_uri; nocase; content:"v.ht"; content:"Host"; http_header; classtype:attempted-recon; sid:200072047; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/xonp?confirmation_facebook_report"; http_uri; nocase; content:"v.ht"; content:"Host"; http_header; classtype:attempted-recon; sid:200072048; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"vaicacessvaivcceaririacrsior.avisievsaacciovosioeaosesonosiren.xfemiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072049; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"vaicacessvaivcceaririscri.orvaisvieaseaccivsoioeaosesonssiren.bcruiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072050; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"vaicacevseaivccearirivcrcaorsai.vieissaacirvoeaicrciaoeaesonseosiren.myxbtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072051; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"vaiccesaicvairccrasoria.viiessvaaciococvinsaoeaosesonseosiren.dtrjwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072052; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"vaiccsvaiccairacrsior.avisievsaaacircovsiniaoeaosesonseosiren.bcruiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072053; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"vaiccsvaiccairacrsior.avisievsaacciovosiiaoeaosesonseosiren.bcruiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072054; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"vaiccsvaiccairacrsior.avisievsaacciovosiiaoeaosesonseosiren.dtrjwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072055; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"vaiccsvaiccairacrsior.avisievsaacciovosiiaoeaosesonseosiren.korhyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072056; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"vaiccsvaiccairscri.orvaisvieascaccivsoioaoeaosesonseosiren.dtrjwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072057; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"vaiccsvaiccairscri.orvaisvieaseaccivsoioaoeaosesonseosiren.fsxvtu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072058; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"vaiccsvaiccairscri.orvaisvieaseaccivsoioaoeaosesonseosiren.xfemiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072059; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"vaiccvcaicaairicr.voriasvaiecsvasciiooaoeaosesonseosiren.bcruiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072060; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"vaiccvsaiccairccrasoria.viiessvaaciraoecinivraoeaosesonseosiren.dtrjwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072061; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"vaiccvsaicvairccrasoria.viiessvaacioeocvinsaoeaosesonseosiren.xfemiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072062; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.lzpytu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072063; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.gelxdu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072064; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.zdhku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072065; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.fajubu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072066; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.zdhku.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072067; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/689734/3489345346/"; http_uri; nocase; content:"verifyservices-contact.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072068; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/dbccb42?q=rmjtlz9pptexndk2msy0qzbxba=="; http_uri; nocase; content:"verifyus.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200072069; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"viaaavceesevcesei.visvacsveerasoir.zxgyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072070; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.doobbu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072071; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"viaaaveeecesvcsceei.viacsaversvoerrasi.ufsheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072072; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"viaaeavesvcsceei.viavacesvoerrcsaias.efxadu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072073; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"viaavasevcesei.vivcasveesacoiras.doobbu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072074; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"viaavcseevceei.visvsveacsir.doobbu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072075; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"viaavcseevceei.visvsveacsir.efxadu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072076; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"viaaveceesavceei.visvsvceasiraser.ufsheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072077; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"viaaveceesvcceei.visavscverarsi.efxadu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072078; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"viaaveseevacei.vivsvesicaserr.ylukru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072079; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"viacsevcesei.visvasvceeaso.zxgyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072080; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"viaecesvcsceei.viasavesvcoerra.ufsheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072081; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"viaecesvcsceei.viasavesvcoerra.zxgyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072082; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"viaeevseceeai.vivccvceaaaeii.xjsfmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072083; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"viaevasvcceei.vivacsvercsaias.efxadu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072084; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"viaevesvcsceei.viavacesvcoerrs.iddr8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200072085; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"viaevesvcsceei.viavacesvcoerrs.ufsheu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072086; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"viaiesvccaeeesvi.cvsceveeaaavis.xjsfmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072087; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"viaiesvccaeeesvi.cvsceveeaaavis.zteusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072088; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"viaievsaecai.vivcvcveaei.wrpvyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072089; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"viaievsaecai.vivcvcveaei.zteusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072090; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"viaisvcaeeesvi.vscveeaaavs.idolba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072091; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"viaisvcaevsvi.vscveveavs.wrpvyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072092; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/2021/03/blog-post.html"; http_uri; nocase; content:"viamobte.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072093; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"viasevceceesvi.vsccveeaaavsi.wrpvyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072094; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"viasevcecvsvi.vsccveveavsi.wrpvyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072095; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"viasevcecvsvi.vsccveveavsi.zteusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072096; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"viasvceeesvi.vscveaaavs.gjkguu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072097; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"viavcasevcesei.visvasveeascoiras.iddr8.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200072098; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"viavsavceei.vivcsvecsaias.efxadu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072099; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/.tmb/consle/linkedin.com.html"; http_uri; nocase; content:"victorpochat.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200072100; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/.tmb/consle/linkedin.com.html?73616c65734075736d6574616c732e636f6d"; http_uri; nocase; content:"victorpochat.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200072101; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/63596493878d7000123d9397"; http_uri; nocase; content:"view.genial.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200072102; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/63616a62385d2500189e2a21"; http_uri; nocase; content:"view.genial.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200072103; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/63617982a9d9a400175c5e69"; http_uri; nocase; content:"view.genial.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200072104; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"visaevvcsoeissiver.oea.tncjmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072105; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/uwbrvz8quj/page1.php"; http_uri; nocase; content:"viseoscai.vscsaeeicso.uqmzwu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072106; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"vivcsavceei.visvsvecasias.efxadu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072107; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"vivcsavceei.visvsvecasias.zxgyru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072108; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/uwbrvz8quj/page1.php"; http_uri; nocase; content:"vivcssecreesecei.vcieeaaevesi.zxpdbu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072109; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"vivecasvcceei.visavsvercasias.efxadu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072110; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevaasvcsi.aa.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072111; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevaasvcsi.aa.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072112; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevaasvcsi.aa.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072113; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevaasvcsi.aa.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072114; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevaasvcsi.aae.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072115; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevaasvcsi.aae.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072116; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevaasvcsi.aae.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072117; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevaasvcsi.ca.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072118; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevaasvcsi.cae.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072119; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevaasvcsi.cae.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072120; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevaasvcsi.cae.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072121; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevaasvcsi.cae.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072122; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevaasvcsi.ea.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072123; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevaasvcsi.ea.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072124; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevaasvcsi.eae.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072125; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevaasvcsi.eae.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072126; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevaasvcsi.eae.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072127; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevasvsi.a.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072128; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevasvsi.a.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072129; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevasvsi.ae.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072130; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevasvsi.ae.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072131; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevasvsi.ae.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072132; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevasvsi.c.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072133; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevasvsi.c.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072134; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevasvsi.c.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072135; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevasvsi.ce.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072136; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevasvsi.ce.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072137; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevasvsi.e.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072138; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevasvsi.ee.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072139; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevasvsi.ee.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072140; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevsvcai.vivsvcvaei.gjkguu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072141; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivevsveeai.vivsvcaaaei.wrpvyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072142; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivieevscavcai.vicvsvecveaeii.zteusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072143; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivieevscaveeai.vcivsevceaaaeii.gjkguu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072144; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivieevscaveeai.vcivsevceaaaeii.xjsfmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072145; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"viviesvccaieesvi.cvsaeveeaasvis.idolba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072146; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivievsavcai.vivsvcveaei.xjsfmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072147; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivievsaveeai.vivsvceaaaei.zteusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072148; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivisvcaieesvi.vsaveeaasvs.idolba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072149; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivisvcaieesvi.vsaveeaasvs.zteusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072150; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivisvcaivsvi.vsavevesvs.idolba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072151; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivisvcaivsvi.vsavevesvs.wrpvyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072152; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivisvcaivsvi.vsavevesvs.zteusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072153; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"vivsacsocieesesia.c.tncjmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072154; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsevciceesvi.vscaveeaasvsi.xjsfmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072155; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsevcicvsvi.vsacvevesvsi.xjsfmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072156; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsiaavccais.ca.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072157; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsiaavccais.ca.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072158; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsiaavccais.ca.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072159; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsiaavccais.ca.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072160; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsiaavccais.ca.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072161; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsiaavccais.cae.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072162; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsiaavccais.cae.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072163; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsiavcais.c.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072164; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsiavcais.c.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072165; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsiavcais.c.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072166; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisavccais.ea.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072167; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisavccais.ea.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072168; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisavccais.ea.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072169; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisavccais.eae.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072170; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisavccais.eae.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072171; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisavccais.eae.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072172; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisavccais.eae.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072173; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisavccais.sa.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072174; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisavccais.sa.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072175; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisavccais.sa.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072176; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisavccais.sa.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072177; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisavccais.sae.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072178; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisavccais.sae.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072179; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisavccais.sae.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072180; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisavccais.sae.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072181; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisvcais.e.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072182; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisvcais.e.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072183; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisvcais.e.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072184; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisvcais.ee.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072185; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisvcais.ee.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072186; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisvcais.ee.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072187; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisvcais.ee.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072188; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisvcais.s.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072189; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisvcais.s.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072190; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisvcais.s.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072191; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisvcais.s.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072192; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisvcais.se.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072193; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisvcais.se.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072194; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsisvcais.se.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072195; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsvaavecc.vca.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072196; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsvaavecc.vca.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072197; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsvaavecc.vca.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072198; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsvaavecc.vca.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072199; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsvaavecc.vca.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072200; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsvaavecc.vcae.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072201; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsvavec.vc.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072202; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsvavec.vc.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072203; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsvavec.vce.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072204; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsvavec.vce.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072205; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsvavec.vce.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072206; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsviavecc.veae.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072207; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsviavecc.veae.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072208; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsviavecc.veae.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072209; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsviaveccv.ea.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072210; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsviaveccv.ea.wxtjru.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072211; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsvivec.ve.jutzau.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072212; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsvivec.ve.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072213; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsvivec.ve.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072214; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsvivec.vee.mrrkuu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072215; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsvivec.vee.uqxuqu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072216; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vivsvivec.vee.vjegsu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072217; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http%3a%2f%2f18.219.14.108/index.php?key=ccugr"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072218; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http%3a%2f%2f35.229.41.22?key=n4jki,email=email@icloud.com&post=11231_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072219; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http%3a%2f%2fhumanity06.com%2fwp-content%2fthemes%2fapi.html"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072220; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://168.61.163.101/index.html?key=oppca,email=irs.government@icloud.com&amp\;post=63156_1&amp\;cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072221; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.1.185.241/index.html?key=oppca,email=trackfinance@irs.gov&post=63156_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072222; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.109.41.124?key=a0j3o,email=kminella@icloud.com&post=13847_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072223; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.109.41.124?key=mk9z6,email=lupekerber@yahoo.com&post=82701_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072224; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.110.189.189?key=e86i8,email=email@icloud.com&post=52917_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072225; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.110.189.189?key=ujas3,email=email@icloud.com&post=95993_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072226; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.110.73.46?key=rpgvc,email=email@icloud.com&post=35214_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072227; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.117.201.219?key=a9anr,email=email@icloud.com&post=67925_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072228; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.117.201.219?key=a9anr,email=kminella@icloud.com&post=67925_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072229; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.121.2.22/index.html?key=oppca,email=trackfinance@irs.gov&post=63156_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072230; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.203.161.161?key=bekja,email=kimberlidismuke13@icloud.com&post=98876_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072231; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.203.161.161?key=dlqg7,email=email@icloud.com&post=88353_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072232; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.203.161.161?key=ffiqb,email=email@icloud.com&post=65185_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072233; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.203.161.161?key=tqayb,emai=email@icloud.com&post=01286_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072234; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.213.164.95?key=jdlwh"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072235; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.213.46.217?key=bgckvctutk"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072236; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.213.49.9/?key=voqj5,email=durincat8@icloud.com&post=19202_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072237; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.222.3.107?key=rtudqaeeba"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072238; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.222.3.107?key=skfefvlukk"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072239; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.222.35.247?key=iguhqpukhn"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072240; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.229.141.100/index.html?key=oppca,email=irs.government@icloud.com&amp\;post=63156_1&amp\;cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072241; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.230.50.243?key=uyffw,email=email@sbcglobal.net&post=87074_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072242; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.239.152.26/index.html?key=oppca,email=irs.government@icloud.com&post=63156_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072243; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.39.209.90?key=hcirs,email=email@icloud.com&post=94243_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072244; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.40.64.158?key=0uqyr,email=email@yahoo.com&post=94707_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072245; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.40.64.158?key=sbjxm,email=email@yahoo.com&post=31496_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072246; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.68.105.113?key=gojjs,email=email@icloud.com&post=65211_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072247; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.68.105.113?key=hiumv,email=golder.cm@icloud.com&post=58507_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072248; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.68.105.113?key=ihwbn,email=email@icloud.com&post=01341_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072249; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.68.105.113?key=qba0d,email=email@icloud.com&post=85453_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072250; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.70.19.11?key=ejkco,email=dlighted@icloud.com&post=16970_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072251; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.70.19.11?key=nn7jd,email=email@icloud.com&post=71936_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072252; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.70.19.11?key=pcah4,email=email@icloud.com&post=58184_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072253; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.74.246.12?key=1g3zv,email=email@icloud.com&post=71118_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072254; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.74.246.12?key=7opkq,email=dylanmarilyn@icloud.com&post=19298_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072255; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.74.246.12?key=dtruh,email=email@icloud.com&post=48614_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072256; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.74.246.12?key=m4rhr,email=email@icloud.com&post=09923_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072257; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.77.66.21?key=nc14b,email=ebynum84@icloud.com&post=99099_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072258; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.91.205.251?key=dlykh,email=samantha.adams76@icloud.com&post=04213_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072259; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://20.91.205.251?key=pj3yz,email=email@icloud.com&post=67421_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072260; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://40.117.61.134/index.html?key=oppca,email=trackfinance@irs.gov&post=63156_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072261; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://40.77.6.54?key=oppca"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072262; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://40.82.145.107?key=nr1yf,email=nccollis@icloud.com&post=15853_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072263; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://40.87.142.94?key=mgpnmfsjjt"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072264; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://51.12.50.209?key=vkmgm,email=samyafinley@icloud.com&post=27530_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072265; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://52.179.20.96?key=8s5yy,email=jhnpaul@icloud.com&post=99298_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072266; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=http://52.179.20.96?key=pjway,email=tkey8@icloud.com&post=45230_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072267; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https%3a%2f%2fartesvladshiola.com%2f.well-known%2fpki-validation%2fsondu%2fkomuter&post=696668869_33&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072268; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https%3a%2f%2fedelwiral.info%2fwp-includes%2fsodium_compat%2fnamespaced%2fcore%2fcurve25519%2fgose&post=696668869_17&cc_key=/?xjxiixmi-suirs70143986"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072269; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https%3a%2f%2femtowersgroup.com%2fwp-admin%2fimages%2fgrak%2fsus&post=696668869_19&cc_key=/?uccxgwww-kampo32395997"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072270; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https%3a%2f%2frdx-federal.com%2f&post=710109641_2"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072271; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https%3a%2f%2ftempt.lk%2fhosr&post=696668869_21&cc_key=/?hbijqrvf-mom71222564"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072272; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https%3a%2f%2fwolffun.net%2fwp-includes%2fwidgets%2fxloa%2fclose%2f&post=696668869_14&cc_key=/?xoxlosml-usa34359382"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072273; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://7chavesdoprazer.site/wp-includes/css/apicayyx.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072274; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://amrutimba.com/css/api.php?key={random_letternumberuplow_5},email={email}&post={random_number_5}_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072275; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://bardestani-carpet.com/wp-includes/css/apicuy.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072276; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://ecophase.in/wp-includes/assets/api.html?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072277; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://egyptvespa.com/css/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key="; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072278; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://forextradingtruth.com/wp-includes/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072279; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://greyhillconsulting.com/assets/css/api.html?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072280; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://grocerypanna.com/wp-admin/user/apito.html?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&amp\;post=%7brandom_number_5%7d_1&amp\;cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072281; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://haoweya.com/assets/api.html?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072282; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://jindalbuildcon.com/wp-includes/assets/api.html?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072283; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://livemusic24.xyz/wp/wp-content/themes/api.html?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072284; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://mumnbebe.com/wp-includes/js/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072285; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://naturesbuffet.co.in/api-lrsbaru.html?key={random_letternumberuplow_5},email={email}&post={random_number_5}_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072286; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://neonamsterdam.com/wp-admin/css/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072287; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://pyxcapital.com/wp-content/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072288; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://rdx-usaprofilefederal.com?key=nfhjn,email=email@email.com&post=47493_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072289; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://rdx-usaprofilefederal.com?key=zza21,email=email@email.com&post=39704_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072290; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://serv.jembudirenkgk.com/sple/sadjhfjhcuic?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072291; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://srv.remaikerea.com/apa/wisedanlah?key=dvnd3,email=apohlmann@icloud.com&post=60667_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072292; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://trimsx.com/wp-includes/assets/api.html?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072293; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://twitter.com?w5htjopplcko0cun0kky&cc_key=?trackingid=o9xc3cyu&signature=newsletter"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072294; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://wpcdecor.com/wp-includes/acy-ling.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072295; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://www.alkorplan.de/wp-admin/js/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072296; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://www.mathelin-teinture-tissus.com/assets/include/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072297; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://www.mathelin-teinture-tissus.com/assets/js/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072298; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://www.newlifenursery.com/assets/rdt.html?key=lwhi1"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072299; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://www.pawcz.cn/wp-includes/css/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072300; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://www.pawcz.cn/wp-includes/js/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072301; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://www.sinergy.io/wp-includes/js/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072302; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://www.thaitheparos.com/assets/css/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072303; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://www.ulicapolska.pl/public/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072304; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://www.zb5201314.cn/wp-includes/css/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072305; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/away.php?to=https://zeii-egipt.bombsquadz.com/wp-content/themes/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; http_uri; nocase; content:"vk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072306; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vsaievseceeiv.viaccveeaaaasi.zteusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072307; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vsaiivsaeaiv.viacveveaas.zteusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072308; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vsaivseaiv.viacvevaas.gjkguu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072309; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/k7oimyjheu/page1.php"; http_uri; nocase; content:"vsvevsavcceia.c.edtsiu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072310; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vsvieivscacaiv.vicasveevesasi.gjkguu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072311; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vsvieivscacaiv.vicasveevesasi.wrpvyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072312; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vsviivsacaiv.viasvevesas.idolba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072313; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vsviivsacaiv.viasvevesas.wrpvyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072314; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vsviivsaceeiv.viasveeaasas.zteusu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072315; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vsvivscaiv.viasvevsas.gjkguu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072316; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vsvivscaiv.viasvevsas.wrpvyu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072317; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vsvivsceeiv.viasveaasas.gjkguu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072318; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/laucvx4r/page1.php"; http_uri; nocase; content:"vsvivsceeiv.viasveaasas.xjsfmu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200072319; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeigg77t2z6bbaieukzaprj43a5admasyhdz5dv3kggvwk6lmlbip3a/index.html/"; http_uri; nocase; content:"w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200072320; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafybeigw5jlwvykqqwfwiz7bykja2imjyes2ouyl57dd33vpydeip4efgy/30093a.shtml"; http_uri; nocase; content:"w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200072321; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/554135422794"; http_uri; nocase; content:"wa.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200072322; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8jdu/sb6/index.php?_&amp\;_"; http_uri; nocase; content:"wallieget.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072323; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8jdu/sb6/index.php?_&amp\;_&amp\;_"; http_uri; nocase; content:"wallieget.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072324; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/o2/a/f5s4y/0"; http_uri; nocase; content:"warriorplus.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072325; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/vajfniynqx-sklyoxtrnpzso9zbpiourcphfgqtgt4rvoq"; http_uri; nocase; content:"web3portal.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072326; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/explorer"; http_uri; nocase; content:"webdeficonnect.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072327; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-content/themes/sketch/js/sf_trash/c45b222914e3c78d"; http_uri; nocase; content:"webuyworkshopequipment.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072328; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wp-content/themes/sketch/js/sf_trash/c45b222914e3c78d/"; http_uri; nocase; content:"webuyworkshopequipment.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072329; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/6hhml"; http_uri; nocase; content:"wee.so"; content:"Host"; http_header; classtype:attempted-recon; sid:200072330; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/company/banco-original"; http_uri; nocase; content:"weps.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200072331; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/microsoft/office365/"; http_uri; nocase; content:"wildchildbritt.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072332; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/@bt_home"; http_uri; nocase; content:"withkoji.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072333; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/@bt_internet"; http_uri; nocase; content:"withkoji.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072334; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/@bt_service_alert."; http_uri; nocase; content:"withkoji.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072335; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/@bt_teem"; http_uri; nocase; content:"withkoji.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072336; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/@bt_update"; http_uri; nocase; content:"withkoji.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072337; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/@bt_upgrade"; http_uri; nocase; content:"withkoji.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072338; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/@btinternet"; http_uri; nocase; content:"withkoji.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072339; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/@yahoo2022"; http_uri; nocase; content:"wlo.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200072340; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/testing02"; http_uri; nocase; content:"wow.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200072341; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ne12/login-jsf.php?op=&i"; http_uri; nocase; content:"www-bradesco1.ne12progatesnet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072342; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f4jr1"; http_uri; nocase; content:"xep.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200072343; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/29fkw6"; http_uri; nocase; content:"yip.su"; content:"Host"; http_header; classtype:attempted-recon; sid:200072344; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/#test@test.com"; http_uri; nocase; content:"zi0034034323.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200072345; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/forms/?serviceurl=/qudustemitope455/form/signinyourbtaccountcorrectly/share"; http_uri; nocase; content:"zoho.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200072346; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/5huqpx39dylu"; http_uri; nocase; content:"zpr.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200072347; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/efrrqedv9fec#michael@.yorku.ca"; http_uri; nocase; content:"zpr.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200072348; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/kms8u47zlxwk"; http_uri; nocase; content:"zpr.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200072349; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mxvzwlcdizyq"; http_uri; nocase; content:"zpr.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200072350; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/nckeqquhrpuf"; http_uri; nocase; content:"zpr.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200072351; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/uyydv5mqujps"; http_uri; nocase; content:"zpr.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200072352; rev:1;)